Data Risk Manager – Data Risk & Third-Party Integration

Role: Data Risk Manager – Data Risk & Third-Party Integration

Location – Richmond, VA - Hybrid 

Certifications - DAMA or CDMP

Call Notes

• We are seeking an experienced Data Risk Manager to support a large-scale business and technology integration. This role will focus on assessing and managing data risk across operational and analytical data flows, third-party integrations, data migrations/conversions, and downstream data consumption.
• The Data Risk Manager will partner closely with Risk Management, Data Governance, Business, Technology, and Data Integration teams to understand evolving data architecture and identify risks associated with how data is accessed, transferred, transformed, shared, and consumed.
• A key focus of this role will be evaluating third-party data risk, particularly in environments where external vendors or service providers require access to organizational or customer data. The individual will assess whether appropriate data is being shared, ensure unnecessary or unauthorized data is restricted, evaluate existing controls, and recommend risk mitigation strategies.
• Key Responsibilities
• Assess data risks across operational and analytical data flows, including data entering, moving through, and leaving enterprise systems.
• Partner with Business, Technology, Data, Risk, and Governance stakeholders to understand data architecture, integrations, migrations, conversions, and downstream consumption pipelines.
• Identify new and changing data risks resulting from business and technology integrations, data migrations, third-party services, and evolving data architectures.
• Evaluate data access controls and risk mitigation measures to ensure users, systems, vendors, and third parties have access only to the data required for legitimate business purposes.
• Assess third-party data risk, including how external vendors receive, access, process, transfer, and consume organizational and customer data.
• Review third-party and downstream data-sharing arrangements to identify potential overexposure of data, excessive access, inappropriate data consumption, or insufficient controls.
• Evaluate the design and sufficiency of data management, data governance, access, and technology controls and identify control gaps requiring remediation.
• Perform or support independent validation of data controls and mitigation activities to determine whether identified risks have been appropriately addressed.
• Assess risks associated with data migrations and conversions, including data movement between legacy, target, third-party, and downstream systems.
• Develop and document data risk assessments, control evaluations, findings, mitigation strategies, and remediation recommendations.
• Apply strong analytical judgment to assess risk in an evolving integration environment where data architecture, processes, and controls may continue to change.
• Translate complex technical and data concepts into clear risk assessments, findings, recommendations, and executive-level summaries for business and risk stakeholders.

Required Qualifications

• Strong experience in Data Risk Management, Data Governance, Data Management, Technology Risk, or a closely related discipline.
• Demonstrated understanding of data governance and control concepts, including data access, data sharing, data movement, downstream consumption, and risk mitigation.
• Experience assessing third-party/vendor data risks, particularly where sensitive or customer data is shared with external service providers.
• Experience supporting or assessing data migrations, data conversions, system integrations, or large-scale technology transformation initiatives.
• Understanding of data consumption pipelines and end-to-end data flows, with the ability to evaluate how data moves between source systems, integrated platforms, third parties, and downstream consumers.
• Experience evaluating data access controls and determining whether access and data sharing are appropriately restricted based on business requirements and risk.
• Experience performing risk assessments, control assessments, and/or independent validation of risk mitigation activities.
• Strong analytical judgment with the ability to identify control gaps and assess risk in complex and evolving environments.
• Strong written and verbal communication skills, with demonstrated ability to translate technical and data concepts into business-focused risk assessments and executive summaries.

Role Description:

Data Risk Manager to support a large-scale business and technology integration by assessing data risk across operational and analytical data flows, third-party integrations, data mitigations, and downstream consumption  The role will partner with business, technology, data, and risk stakeholders to understand evolving data architecture, identify new or changing data risks, evaluate the sufficiency of data management controls and validation activities, and support development of risk assessments and mitigation strategies.

The ideal candidate would have:

• Strong background in data management, data risk, data governance, or technology risk.
• Experience with data migrations/conversions
• Knowledge of data governance and control concepts
• Strong analytical judgement and ability to work effectively in evolving environments
• Strong written and verbal communication skills, particularly with experience translating data concepts into risk assessments and/or executive summaries