Senior Manager, Data Governance & Stewardship

fingerpaint•Cedar Knolls, NJ

About The Position

Fingerpaint is hiring an individual contributor to own and evolve its data governance assessment service. The role is responsible for turning a high-touch review service into a ticketed, tiered, and largely automated process with clear service-level agreements. It sits at the intersection of data, technology, AI, privacy, contracts, and agency media operations, and reports to the VP of Platform Engineering. Internal counsel retains authority over legal interpretation; this role prepares structured reviews for counsel and translates counsel’s conclusions into practical processes, controls, and guidance for media, account, engagement, and strategy teams. The position has no direct reports. The role owns assessments from intake through risk-based tiering, review, decision, and approval. It establishes request types, published SLAs, and documented procedures, and ensures assessments conclude with defined commitments covering data and intended use, handling requirements, implementation ownership, and verification. It also translates obligations found in client and vendor agreements into operational restrictions, controls, and workflows; develops playbooks and self-service tools; and provides training and enablement. Working with Product, Data Platform, Engineering, Analytics, and Media, the Senior Manager defines requirements for automation across approvals, access, retention, deletion, client-specific restrictions, compliance alerts, and evidence capture. The role evaluates AI-assisted approaches for governance work, contributes governance requirements for customer graphs and audience assets, and maintains reporting on issues, exceptions, remediation, control completion, assessment volume and cycle time, and approaching obligation expirations.

Requirements

At least 6 years of experience in data governance, privacy operations, data management, stewardship, compliance, or data risk.
Demonstrated experience translating contractual, regulatory, or policy requirements into operating processes and technology.
Experience working with data contracts and data-use restrictions.
Working knowledge of HIPAA, CCPA/CPRA, and US state privacy laws, including Washington's My Health My Data Act, Nevada SB 370, and Connecticut's health data amendments.
Familiarity with HIPAA de-identification standards (Safe Harbor and Expert Determination) as they apply to audience assets and customer graphs.
Fluency in data flows and data modeling, including schemas, row-level and aggregate data, identifiable and de-identified data, pipelines, APIs, warehouses, access controls, sharing, retention, and deletion.
Ability to work independently and apply proportionate judgment about when an issue requires counsel, a formal assessment, an existing control, or a practical answer.
Ability to influence without authority, build trust across teams, explain complex issues clearly, and hold people to commitments without creating friction.

Nice To Haves

Basic SQL; strongly preferred.
Experience defining requirements alongside Product, Engineering, or Data Platform teams and automating compliance or governance workflows.
Familiarity with AI governance and responsible data use.
Working knowledge of the media lifecycle from activation to measurement, with exposure to ad tech and programmatic media.
Healthcare, life sciences, or pharmaceutical marketing background, with agency, consulting, or client-services experience.
CIPP/US, CIPM, or equivalent certification.

Responsibilities

Own the data governance assessment service end to end, including intake, risk-based tiering, review, decisions, and approvals.
Establish request types, published SLAs, and documented assessment procedures.
Close assessments with defined commitments covering data use and handling, implementation ownership, and verification.
Prepare structured briefs for counsel and coordinate legal reviews through execution.
Translate requirements in client contracts, SOWs, DPAs, DUAs, and vendor agreements into practical restrictions, controls, workflows, and guidance.
Identify the teams, systems, and data flows affected by contractual and other requirements.
Build playbooks, decision trees, and self-service tools that help teams find compliant ways to meet their goals.
Run training and enablement, and improve processes based on recurring questions.
Identify recurring compliance work suitable for automation.
Partner with Product, Data Platform, and Engineering to define requirements for automated data-use approval and access workflows, retention and deletion controls, client-specific restrictions, compliance alerting, and automated evidence capture.
Inform governance requirements for customer graphs and audience assets alongside Analytics, Media, and Data Platform.
Evaluate AI-assisted approaches to assessment triage, requirement extraction, guidance drafting, and control-evidence generation, including whether outputs are reliable enough to use.
Maintain practical reporting on open issues, exceptions, remediation, control completion, assessment volume and cycle time, and obligations approaching expiry.