Data Governance and Risk Lead

Job Description

About the Role

As the Data Governance & Risk Lead, you will play a key role in strengthening Penbrothers enterprise data governance, AI governance, and risk management capabilities. As part of the Transformation Team, you will lead the implementation and continuous improvement of governance frameworks, policies, standards, and processes that ensure data integrity, regulatory compliance, and effective risk management across the organization.

This role is ideal for someone who is passionate about building practical governance frameworks, improving business processes, and enabling the organization to leverage data as a strategic asset.

Work Set-up: Primarily work from home / remote (with occasional onsite reporting required 1x to 2x per quarter for team meetings, planning sessions, or business needs)

Work Schedule: Day Shift - Monday to Friday from 9:00 AM to 6:00 PM Philippine time

What You'll Do (Duties and Responsibilities)

• Lead the development and continuous improvement of Penbrothers Data, AI, and Governance frameworks, policies, standards, and best practices.
• Partner with business, technology, legal, and transformation teams to ensure data quality, integrity, compliance, and responsible AI adoption.
• Drive data governance initiatives, including data lifecycle management, retention, disposal, metadata, and data quality programs.
• Act as the Product Owner for governance tools, data management platforms, and governance-related assets.
• Champion a data-driven culture by delivering governance education, improving data literacy, and promoting best practices across the organization.

• Own and enhance the enterprise data risk management framework, ensuring data risks are identified, assessed, mitigated, and monitored.
• Establish effective risk governance processes, including risk registers, controls, reporting, and governance forums.
• Collaborate with business stakeholders to design and implement practical risk mitigation strategies and control improvements.
• Monitor the effectiveness of data risk controls, key risk indicators (KRIs), and remediation plans, providing regular insights to leadership.
• Serve as the subject matter expert for data governance, data risk, and control frameworks.

• Build strong relationships with business leaders, project teams, Legal, Security, Technology, and external partners to embed governance and risk practices.
• Advise stakeholders on governance requirements, regulatory compliance, and risk management while enabling business objectives.
• Work closely with project teams to integrate governance and risk controls into new initiatives and business processes.
• Identify governance gaps, recommend improvements, and support successful implementation across the organization.

• Promote a strong governance and risk culture by communicating the value of effective data management and risk practices.
• Lead governance working groups and facilitate the development of policies, standards, and procedures.
• Build and support a Data Community of Practice, mentoring stakeholders and promoting knowledge sharing.
• Provide leadership, coaching, and guidance to team members while fostering collaboration and continuous improvement.
• Partner with senior leaders to enhance team capability, optimize processes, and strengthen governance across the business.

• Data Governance & Risk Management: 7+ years of experience designing, implementing, and improving data governance and enterprise risk management frameworks, including policies, standards, data lifecycle management, risk assessments, controls, risk registers, reporting, and remediation, with at least 2 years in a senior or lead role.
• Compliance & Governance: Strong understanding of governance principles, regulatory compliance, policy development, and organizational controls.
• Stakeholder Management: Proven ability to collaborate with cross-functional stakeholders, facilitate governance forums, and drive adoption of governance and risk practices.
• Education: Bachelor's degree in Business, Information Technology, Information Management, Risk Management, or a related field.
• Soft Skills: A collaborative, adaptable, and solutions-oriented leader with excellent stakeholder management skills, capable of influencing teams, driving cultural change, and promoting governance through partnership rather than a rigid compliance-first approach.
• Certifications/Trainings (preferred but not required): Certifications aligned with IPA Governance Practitioner Standards (e.g., Information Management, Privacy, or AI Governance) and experience developing data or AI governance policies and frameworks.