Join our Data Risk team as a Senior Associate in Assurance. We are looking for experienced Data Risk Consultants to bolster enterprise data governance, data protection, and regulatory compliance efforts. If you have a solid grasp of data classification, risk management, governance frameworks, and technology risk controls, you'll be instrumental in helping organizations navigate and mitigate data-related risks.

Lead comprehensive data risk assessments across various business applications, databases, and critical information assets. Develop and implement robust data classification frameworks to safeguard sensitive and regulated data. Collaborate with stakeholders to enhance data governance practices and establish clear accountability.

Evaluate data lineage and handling processes to pinpoint potential risk exposures. Recommend and implement effective data protection controls, including encryption and access management solutions. Monitor adherence to organizational data security policies and regulatory mandates.

Utilize GRC platforms for documenting findings and tracking remediation. Support regulatory compliance assessments for GDPR, GLBA, SEC, FINRA, and similar regulations. Conduct technology risk assessments and IT General Controls reviews to identify gaps and provide practical recommendations.

Partner with cross-functional teams to strengthen the organization's overall risk posture. Prepare insightful risk reports and executive summaries for management. Assist in policy development, control testing, and issue management activities, while also supporting internal and external audits.

We require candidates with 3 to 5 years of experience in Data Risk, Information Risk Management, Technology Risk, or IT Audit. A strong understanding of Data Governance frameworks, including Data Ownership, Data Stewardship, Metadata Management, and Data Lineage, is essential.

Experience in implementing and managing Data Classification programs is crucial. You should possess knowledge of Data Protection technologies such as Encryption, Access Management, Privileged Access Controls, and DLP solutions. Hands-on experience with GRC platforms like ServiceNow GRC, RSA Archer, or OpenPages is expected.

Working knowledge of regulatory requirements including GDPR, GLBA, SEC, FINRA, and CCPA is necessary. Proven experience in performing Technology Risk Assessments and IT General Controls (ITGC) reviews is also required. A Bachelor's degree is the minimum educational qualification for this role.