Information Technology Governance Consultant

This position is responsible for leading the design, implementation, and operation of enterprise technology and data governance within the security function. The leader will partner with the individual serving in the CISO role, the Chief Digital Technology Officer (CDTO), and key business stakeholders to ensure technology and data policies, decision rights, and controls align with business outcomes and risk appetite. This role owns program-level activities including technology and data inventory and mapping, classification and minimization, stewardship model, data access controls, data risk assessment, and governance metrics to support compliance, security, and AI readiness. Job Duties Governance: Establish the rules, policies, and structures that direct how the technology and Business Enablement organization operates, ensuring accountability and strategic alignment Risk Management: Guide enterprise cyber risk management practices and alignment with business risk tolerance Compliance Oversight: Monitor adherence to external laws (e.g., GDPR) and internal policies to identify compliance gaps Stakeholder Communication: Partner with Executive Leaders and senior stakeholders to deliver meaningful insights into the organization’s risk posture and compliance status. Program Implementation: Lead the selection and deployment of GRC software (e.g., Vanta, MetricStream) to automate controls and reporting Define and maintain the technology and data governance charter, scope, and decision-rights model (RASCI) in collaboration with business and organizational stakeholders Develop and operationalize technology and data classification, minimization, and retention policies with business, privacy, and security partners Oversee the development of a prioritized inventory of technology and data assets to enable discovery, classification, lineage tracking, and risk analysis Lead stewardship program design and placement (centralized, federated, or hybrid), assign data owners and stewards, and embed stewardship into operational workflows Design and run Data Risk Assessments (DRA / FinDRA) to prioritize datasets by business impact and to inform security investment decisions. Serve as a primary liaison for external audits, regulatory reviews, and client-facing assessments to provide assurance and evidence for compliance activities Specify controls and access governance (PBAC/Purpose/role-based) and coordinate with IAM, DSPM/DLP, and SIEM/SOC as needed Select and oversee integration of governance tooling (catalog, lineage, DSPM, DQ, MDM, observability) Implement metrics, dashboards, and reporting that link governance activities to business KPIs and risk metrics for executive stakeholders All other duties as assigned Requirements Bachelor Degree in Computer Science, Information Technology or related field. 8 years information security experience Capability to define policy, decision rights (RASCI), and steward models (centralized/federated/hybrid) Demonstrated ability to engage Executive Leadership, advance data literacy, convene steering committees, and translate risks into business and financial terms for senior leaders Proven experience leading technology or data governance programs and working crossfunctionally to operationalize classification, stewardship, access controls, risk assessments, exception management, and continuous improvement Experience conducting risk assessments and working with security, privacy, legal, audit, and business teams to translate risks into prioritized remediation and investment needs Technical knowledge of metadata, data cataloging, lineage, MDM, data quality, DSPM/DLP, DataOps/Data observability concepts, and governance platform integrations with data architectures. Applied experience in project management principles and methods One or more professional cybersecurity certifications (e.g., Security+, CISA, CRISC, CISSP) EEO Statement Brooksource is an equal opportunity employer that does not discriminate on the basis of actual or perceived race, color, creed, religion, national origin, ancestry, citizenship status, age, sex or gender (including pregnancy, childbirth, lactation and related medical conditions), gender identity or gender expression, sexual orientation, marital status, military service and veteran status, physical or mental disability, protected medical condition as defined by applicable state or local law, genetic information, or any other characteristic protected by applicable federal, state, or local laws and ordinances. Benefits & Perks Brooksource offers competitive medical, dental, vision, Health Savings Account, Dependent Care FSA, and supplemental coverage with plans that can fit each employee’s needs. We offer a 401k plan that includes a company match and is fully vested after you become eligible, paid time off, sick time, and paid company holidays. We also offer an Employee Assistance Program (EAP) that provides services like virtual counseling, financial services, legal services, life coaching, etc. Pay Disclaimer The pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law. #J-18808-Ljbffr Brooksource