Title: Data Risk Manager
Duration: 6 months
Location: Richmond Only; Hybrid (T,W,TH preferred)
Summary:
We are seeking a Data Risk Manager to support a large-scale business and technology integration. This role will assess data risk across operational and analytical data flows, data migrations/conversions, third-party integrations, data mitigations, and downstream consumption .
The Data Risk Manager will partner closely with business, technology, data, and risk stakeholders to understand evolving data architecture, identify new or changing data risks, evaluate the sufficiency of data management controls and validation activities, and support the development of risk assessments and mitigation strategies.
This is an expansive role that requires someone who can take a holistic view of data risk across the full data lifecycle and identify where risk may be introduced throughout a business and technology integration.
Team Overview
- Managing Data Steward and is heavily involved in data migration efforts.
- The work within the Data Risk Office is horizontal across all U.S. Card .
- The team is supporting the integration of a very new business line , providing oversight and ensuring that the organization successfully burns down/decommissions the legacy system until the transition is complete .
- The role involves significant stakeholder partnership .
- The Data Risk Manager will work closely to oversee the overall conversion event .
Key Responsibilities
Data Risk Assessment
- Assess data risk across:
- Operational data flows
- Analytical data
- Data migrations and conversions
- Downstream data consumption
- Data models
- Data access
- Third-party integrations
- Data sourcing and mapping
- Conduct end-to-end assessments to identify where data risk may be introduced throughout a migration or conversion event.
- Identify new or changing data risks as the business and technology environment evolves.
- Evaluate risks associated with the introduction of new business lines, systems, vendors, and data flows.
- Assess risks related to data loss , particularly when bringing data from a legacy partner into a new environment and decommissioning the legacy system.
- Assess data access risks associated with onboarding new third-party vendors and new loan servicing capabilities.
- Evaluate risks within downstream consumption pipelines and ensure data is accessed and consumed appropriately.
Data Migration & Conversion
- Support and assess large-scale data migration and conversion activities .
- Evaluate data risks throughout the full migration lifecycle.
- Assess data mapping from source systems through downstream consumption.
- Understand potential points of failure or data risk during data migration.
- Evaluate data validation and reconciliation activities.
- Support the decommissioning of legacy systems while ensuring appropriate data risk controls are in place.
- Assess risks associated with bringing data from legacy partners into new platforms and environments.
Data Governance & Controls
- Apply strong knowledge of data governance and data management control concepts .
- Evaluate the sufficiency of existing data management controls and validation activities.
- Assess preventative and detective controls used to prevent data failures, inappropriate access, data exposure, or unintended use of data.
- Assess data access controls and identify potential gaps.
- Evaluate controls across the data lifecycle to determine where additional mitigation may be required.
- Support development of appropriate data risk mitigation strategies .
Third-Party / Vendor Risk
- Assess data risks associated with onboarding a new third-party vendor supporting loan servicing for new business lines.
- Evaluate how data will flow between internal systems, third parties, and downstream consumers.
- Assess data access and control risks associated with third-party data consumption.
- Identify potential data exposure, loss, or inappropriate access risks.
Stakeholder Partnership
- Partner closely with business, data, technology, and risk stakeholders .
- Work with stakeholders to understand evolving data architecture and data flows.
- Translate complex data concepts and risks into clear risk assessments and executive-level summaries.
- Provide oversight across the overall conversion event.
- Work effectively in an environment where business and technical approaches may evolve or pivot quickly.
Risk Assessments & Mitigation
- Identify and document data risks.
- Develop and support risk assessments .
- Recommend and support risk mitigation strategies .
- Evaluate existing controls and validation activities.
- Identify gaps and recommend preventative or detective controls.
- Provide a holistic view of data risk across the integration.
- Support risk decision-making through strong analytical judgment and clear communication.
Must-Have Skills & Experience
Data Risk / Data Management
- Strong background in data management risk .
- Ability to maintain an overall perspective of the data lifecycle and understand where risk may be introduced in new or changing areas.
- Strong data risk mindset .
- Ability to assess data risk across a broad and evolving environment.
- Strong understanding of data risk assessment concepts.
Data Migration / Conversion
- Experience with data migrations and/or data conversions .
- Experience assessing risk across full end-to-end data migrations is highly relevant.
- Understanding of data mapping, data sourcing, validation, and downstream consumption.
- Experience identifying risks throughout a migration/conversion event.
- Experience with legacy system decommissioning and associated data risks is valuable.
Data Governance
- Strong knowledge of data governance .
- Understanding of data management and governance controls.
- Understanding of data lifecycle, data ownership, data flows, data mapping, and data consumption.
- Ability to assess the effectiveness of data management controls.
Risk Assessment & Controls
- Experience conducting data risk assessments .
- Understanding of preventative and detective controls.
- Experience assessing data access controls.
- Ability to identify potential data loss, data exposure, inappropriate access, and control risks.
- Ability to develop or recommend data risk mitigation strategies.
Analytical Skills
- Strong analytical mind and analytical judgment .
- Ability to assess complex and evolving data environments.
- Ability to identify risks across multiple points in a data lifecycle.
- Comfortable working through ambiguity and evolving approaches.
- Ability to think holistically rather than focusing on a single system or data point.
Communication
- Strong written and verbal communication skills.
- Ability to translate complex data concepts into risk assessments .
- Ability to prepare clear executive summaries .
- Strong stakeholder management and partnership skills.
- Ability to communicate effectively with business, data, technology, and risk stakeholders.
Preferred Background
The client is open to candidates with a number of different backgrounds and titles because this is an expansive role.
Preferred Previous Titles
- Data Governance
- Data Risk
- Risk Management
- Data Management
- Technology Risk
- Data Stewardship
Risk Management and Data Risk titles are particularly preferred.
Industry Background
- Candidates with experience in banking or financial services are preferred.
- Candidates from other financial institutions are welcome.