Data Manager/Data Governance

12 month contract – Mostly remote with 3 days per month in the Brussels office – IR35 determination pending, possibly inside IR35

My client is a financial services organisation based in the Netherlands, they are looking to develop a Data Management team to drive a project that aims to start a technical data management service. The purpose of this team is to make sure that the data is able to be managed over time. Technical data is the structured and unstructured data that is produced and consumed by the IT assets, it is vital that the data infrastructure operates correctly.

The aim of the project is to:

• Set up the governance by identifying the key service roles (RACI) including the ownership.
• Set up the approach to identify the technical data assets present in the organisation.
• Build the inventory
• Document the lineage (upstream and downstream dependencies) for each technical data asset. Coined as “Cartography”.
• Produce a classification standard, based on the lineage, to ensure a consistent classification of the technical data assets.
• Assess the conformity with the mandatory control objectives.
• Initiate (prepare and execute) a plan for the remediation of the gaps.

The value expected of that project is to reduce the risk that unexpected events affect our critical technical assets due to a lack of technical data inventory and classification to an acceptable level.

Governance

• Define the maturity objective to be reached, and the intermediate steps to realistically get there.
• Define, document and implement the governance of technical data management.
• Organize and enforce the annual recertification of the inventory, the maintenance of the interdependencies, of the control gap measurement.
• Engage with Enterprise Architecture & Security Analysts to integrate key technical data management principles and accordingly to the cartography and classification results. Rationalization of the data storage strategies possibly comes as a collateral benefit.

Inventory

• Build and maintain an inventory of the technical data sources and their interdependencies, at the level of “data containers” or “data sources”,

Assurance and remediation

• Identify the needed controls from the SCF, based on our maturity objective, and formalize them as “baseline controls for critical data”.
• Transpose the baseline controls’ objective description into technically enforceable & automatable controls.
• Measure the gap between expected and enforced controls for the critical technical data elements,
• Remediate the gap with the active assistance of the technical data asset owners.