Data Governance And Risk Lead

About the Role

As the Data Governance & Risk Lead, you will play a key role in strengthening Penbrothers' enterprise data governance, AI governance, and risk management capabilities. As part of the Transformation Team, you will lead the implementation and continuous improvement of governance frameworks, policies, standards, and processes that ensure data integrity, regulatory compliance, and effective risk management across the organization.

Working closely with cross-functional leaders, including Technology, Legal, Security, and Operations, you will embed governance and risk practices into day-to-day operations, drive responsible AI adoption, and foster a strong data-driven, risk-aware culture. This role is ideal for someone who is passionate about building practical governance frameworks, improving business processes, and enabling the organization to leverage data as a strategic asset.

Work Set-up: Primarily work from home / remote (with occasional onsite reporting required 1x to 2x per quarter for team meetings, planning sessions, or business needs)

Work Schedule: Day Shift - Monday to Friday from 9:00 AM to 6:00 PM Philippine time

What You’ll Do (Duties and Responsibilities)

Data & AI Governance

• Lead the development and continuous improvement of Penbrothers' Data, AI, and Governance frameworks, policies, standards, and best practices.
• Partner with business, technology, legal, and transformation teams to ensure data quality, integrity, compliance, and responsible AI adoption.
• Drive data governance initiatives, including data lifecycle management, retention, disposal, metadata, and data quality programs.
• Act as the Product Owner for governance tools, data management platforms, and governance-related assets.
• Champion a data-driven culture by delivering governance education, improving data literacy, and promoting best practices across the organization.

Risk Management

• Own and enhance the enterprise data risk management framework, ensuring data risks are identified, assessed, mitigated, and monitored.
• Establish effective risk governance processes, including risk registers, controls, reporting, and governance forums.
• Collaborate with business stakeholders to design and implement practical risk mitigation strategies and control improvements.
• Monitor the effectiveness of data risk controls, key risk indicators (KRIs), and remediation plans, providing regular insights to leadership.
• Serve as the subject matter expert for data governance, data risk, and control frameworks.

Stakeholder Management

• Build strong relationships with business leaders, project teams, Legal, Security, Technology, and external partners to embed governance and risk practices.
• Advise stakeholders on governance requirements, regulatory compliance, and risk management while enabling business objectives.
• Work closely with project teams to integrate governance and risk controls into new initiatives and business processes.
• Identify governance gaps, recommend improvements, and support successful implementation across the organization.

Leadership

• Promote a strong governance and risk culture by communicating the value of effective data management and risk practices.
• Lead governance working groups and facilitate the development of policies, standards, and procedures.
• Build and support a Data Community of Practice, mentoring stakeholders and promoting knowledge sharing.
• Provide leadership, coaching, and guidance to team members while fostering collaboration and continuous improvement.
• Partner with senior leaders to enhance team capability, optimize processes, and strengthen governance across the business.

What You'll Bring (Qualifications)

• Data Governance & Data Lifecycle Mastery: 7+ years of hands-on experience designing, implementing, and maturing enterprise data governance initiatives, with specialized expertise in Data Quality (DQ) metrics, Data Stewardship models, and end-to-end data lifecycle management.
• Enterprise Risk Framework & Policy Execution: Proven experience structuring, applying, and managing enterprise risk frameworks, risk registers, policy development, controls, and risk assessments, with understanding of how risk operates practically within a business.
• Transformational Program Leadership: Track record of building or scaling governance and risk programs end-to-end, demonstrating a realistic understanding of program blockers, organizational maturity, and what it takes to execute successful data transformation programs.
• Collaborative Leadership: Demonstrated collaborative leadership skills, with a focus on coaching, supporting, and empowering team members.
• Structured & Outcome-Driven Communication: Exceptional ability to communicate complex risk and governance concepts concisely to executive stakeholders, backing up narrative points with concrete, end-to-end examples and measurable KPIs.

Nice to have

• Certifications/Trainings (preferred but not required): Certifications aligned with IPA Governance Practitioner Standards (e.g., Information Management, Privacy, or AI Governance) and experience developing data or AI governance policies and frameworks.