Senior Data Risk Specialist

Job Description

About the role:  

Execute and support data risk identification, assessment, lifecycle management, and control activities by maintaining the data risk register, supporting governance artifacts, contributing to risk reporting, and partnering with stakeholders to address data risks across processes, systems, etc.

How will you make a difference as a Senior Data Risk Specialist at Fragomen?

• Identify, assess, and document data-related risks across data-related processes.
• Maintain and update the data risk register, including risk descriptions, impact assessments, controls, and remediation status.
• Support the full data risk lifecycle, from risk identification through mitigation, monitoring, and closure.
• Partner with Data Management, Technology, Legal, Compliance, and Business teams to develop controls and evaluate control effectiveness.
• Assist in the development, documentation, and maintenance of data risk policies, standards, and procedures.
• Support regulatory, audit, and compliance inquiries related to data risk.
• Contribute to risk reporting, metrics, and management summaries.

Leverage your valuable skills and experience to make an impact at Fragomen:

• 5+ years of experience in data risk, enterprise risk, operational risk, data governance, compliance, or related disciplines.
• Experience maintaining risk registers and supporting risk assessments.
• Working knowledge of data management concepts, data quality, data lifecycle, etc.
• Experience drafting or contributing to policies, procedures, standards, or governance artifacts.
• Familiarity with risk and control frameworks and compliance requirements.
• Strong analytical, documentation, and stakeholder communication/collaboration skills.
• Strong organization, problem solving skills, and attention to detail.
• Experience with preparation of materials/presentations for executive level reading (PowerPoint and writing skills).
• Ability to independently assess issues, develop initial recommendations, and engage stakeholders for input, alignment, and escalations.

Nice to have:

• Exposure to audit processes or regulatory examinations.
• Knowledge of enterprise risk, GRC, and data frameworks (e.g., NIST, COSO, DAMA, DCAM, ISO).
• Familiarity with data governance tools, GRC platforms, or data catalogs.

All offers and/or employment contracts are contingent upon the successful completion of the Firm’s pre-employment screening process. This process may include verifying the candidate’s identity, confirming legal authorization to work in the offered position's location, and conducting a comprehensive background check, where permitted by local regulations.