What are the responsibilities and job description for the Lead, Technology Governance position at ESPO Corporation?
Lead, Technology Governance
Kansas City, MO
12 month Contract
Job Description Summary
This position is responsible for leading the design, implementation, and operation of enterprise technology and data governance within the security function. The leader will partner with the individual serving in the CISO role, the Chief Digital Technology Officer (CDTO), and key business stakeholders to ensure technology and data policies, decision rights, and controls align with business outcomes and risk appetite. This role owns program-level activities including technology and data inventory and mapping, classification and minimization, stewardship model, data access controls, data risk assessment, and governance metrics to support compliance, security, and AI readiness.
Job Duties
- Governance: Establish the rules, policies, and structures that direct how the technology and Business Enablement organization operates, ensuring accountability and strategic alignment
- Risk Management: Guide enterprise cyber risk management practices and alignment with business risk tolerance
- Compliance Oversight: Monitor adherence to external laws (e.g., GDPR) and internal policies to identify compliance gaps
- Stakeholder Communication: Partner with Executive Leaders and senior stakeholders to deliver meaningful insights into the organization's risk posture and compliance status.
- Program Implementation: Lead the selection and deployment of GRC software (e.g., Vanta, MetricStream) to automate controls and reporting
- Define and maintain the technology and data governance charter, scope, and decision-rights model (RASCI) in collaboration with business and organizational stakeholders
- Develop and operationalize technology and data classification, minimization, and retention policies with business, privacy, and security partners
- Oversee the development of a prioritized inventory of technology and data assets to enable discovery, classification, lineage tracking, and risk analysis
- Lead stewardship program design and placement (centralized, federated, or hybrid), assign data owners and stewards, and embed stewardship into operational workflows
- Design and run Data Risk Assessments (DRA / FinDRA) to prioritize datasets by business impact and to inform security investment decisions.
- Serve as a primary liaison for external audits, regulatory reviews, and client-facing assessments to provide assurance and evidence for compliance activities
- Specify controls and access governance (PBAC/Purpose/role-based) and coordinate with IAM, DSPM/DLP, and SIEM/SOC as needed
- Select and oversee integration of governance tooling (catalog, lineage, DSPM, DQ, MDM, observability)
- Implement metrics, dashboards, and reporting that link governance activities to business KPIs and risk metrics for executive stakeholders
- All other duties as assigned
Requirements:
Bachelor Degree in Computer Science, Information Technology or related field. and 8 years information security experience. Required or
Applicable years of experience may be substituted for degree requirement. Required
Capability to define policy, decision rights (RASCI), and steward models (centralized/federated/hybrid)
Demonstrated ability to engage Executive Leadership, advance data literacy, convene steering committees, and translate risks into business and financial terms for senior leaders
Proven experience leading technology or data governance programs and working cross‐functionally to operationalize classification, stewardship, access controls, risk assessments, exception management, and continuous improvement
Experience conducting risk assessments and working with security, privacy, legal, audit, and business teams to translate risks into prioritized remediation and investment needs
Technical knowledge of metadata, data cataloging, lineage, MDM, data quality, DSPM/DLP, DataOps/Data observability concepts, and governance platform integrations with data architectures.
Applied experience in project management principles and methods
One or more professional cybersecurity certifications (e.g., Security , CISA, CRISC, CISSP)
ESPO Corporation
www.espocorp.com
630-789-2525
View all open jobs at www.espocorp.com/jobs
Leaders in Technical Recruiting & Staffing since 1965
ESPO has a comprehensive benefits package which includes PTO, Group Health and Dental Insurance, and 401k after you have satisfied the necessary waiting periods.
We are an Equal Opportunity Employer and value the benefits of diversity in our workforce. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity and expression, national origin, disability, protected Veteran status, or any other attribute or protected characteristic by law. If you need assistance applying, please get in touch with us directly.
Salary : $69 - $89