Data Governance Manager

Data Governance Manager

The Data Governance Manager is responsible for how Cash Access UK’s data is defined, owned, classified, protected, shared and retained, inside the data platform and everywhere else it lives. The role works closely with business data owners, the Insights & Analysis team, the Lead Data Engineer, the Cyber Security Manager, Risk, Compliance, the outsourced Data Protection Officer and the Head of Data and Technology to establish what data the organisation holds and ensure it is governed consistently.

Microsoft Purview is the organisation’s central tool for data governance and information protection. The Data Governance Consultant is establishing the data governance framework in Purview, starting with the data platform, and data loss prevention, sensitivity labelling and retention across Microsoft 365 will follow. The Data Governance Manager takes ownership of Purview and the framework as they land, leads their expansion across the organisation, embeds them with business data owners and stewards, and is responsible for operating and developing them from then on, with the Head of Data and Technology remaining accountable for data governance.

This is a hands-on governance role where the post holder works directly in Microsoft Purview and with business teams, rather than an advisory or policy-writing role. The Data Governance Manager is responsible for Microsoft Purview, the data inventory, data classification and protection, the business glossary and the definitions process, data quality management, records and retention, and the data aspects of supplier due diligence.

The role supports the Cyber Security Manager’s response to shadow IT by providing the data input to the non-standard request route, identifying where data is held in unapproved SaaS and AI tools, and bringing that data back into governed systems. It also supports ongoing supplier due diligence from a data perspective, working with Risk, Cyber and the Data Protection Officer on the data each supplier receives or provides, Data Protection Impact Assessments and data processing agreements.

In the first year, the priorities are to name data owners and stewards for the critical data areas, with agreed definitions for the measures used in Board and member reporting; establish a data quality baseline and report on it regularly; take over Purview’s catalogue and lineage for the data platform and keep them working; start sensitivity labelling and data loss prevention, beginning with the most sensitive SharePoint content; and agree a retention schedule, the Data Classification Policy and the Records Management and Retention Policy. The wider Microsoft 365 rollout then follows at a pace agreed with the Head of Data and Technology.

The role will also help set the organisation on a longer-term path towards stronger data governance maturity, including data flow documentation, the wider rollout of labelling and data loss prevention, and the data controls that allow Microsoft Copilot and other approved AI tools to be used safely, ensuring that any improvements are proportionate, achievable and aligned to business risk.

The role also acts as a business partner within the IT function, working with Finance, Risk, Compliance, Projects, Change and wider business teams to make data governance practical, proportionate and enabling. It helps unblock data-related delivery issues, clarify ownership and definitions, coordinate supplier action, and ensure governance is embedded into how the organisation handles data without becoming a blocker to business outcomes.

Responsibilities

Own the data governance framework, Data Governance Policy, standards and operating model, taking them over from the Data Governance Consultant; write and maintain the Data Classification Policy and the Records Management and Retention Policy; embed them with business data owners and stewards; and keep them aligned to UK GDPR and ICO expectations.

Own Microsoft Purview as the organisation’s data governance and information protection platform, including its configuration, administration roles, licensing and roadmap. Lead its expansion beyond the data platform to Microsoft 365 and other key systems, agreeing with the Head of Data and Technology what is rolled out, in what order and at what pace, and making the case for any additional licences needed.

Own the data inventory: what data the organisation holds, where it sits inside and outside the data platform, who owns it, how sensitive it is, who can access it and how long it is kept, together with data flow documentation across platforms, suppliers and the banking hub environment.

Own data classification, sensitivity labelling and data loss prevention across SharePoint, Microsoft 365 and the data platform. This includes agreeing the classification scheme with Risk, Cyber and business data owners; designing and rolling out sensitivity labels; testing data loss prevention policies before enforcing them and tuning them to limit false alerts; training SharePoint site owners; and agreeing with the Cyber Security Manager how alerts are handled. It also includes the oversharing remediation that allows Copilot and other approved AI tools to be used safely.

Support the Cyber Security Manager’s response to shadow IT by providing the data input to the non-standard request route and the register of SaaS tools; using Microsoft Purview’s reporting on AI use to identify where data is held in unapproved tools; and bringing that data back into governed systems.

Own supplier data due diligence, mapping the data each supplier and partner receives or provides; coordinating Data Protection Impact Assessments with the Data Protection Officer; checking data processing agreements and sub-processors; and reviewing critical suppliers annually with Risk and Cyber.

Own data-sharing arrangements with member banks, LINK, the Post Office and other partners, in and out, so that each has an agreement, an owner, a classification and a secure route.

Set up and run the Data Governance Forum with the Insights & Analysis team and business data owners. The forum agrees critical data elements, source-of-truth decisions, data quality rules and KPIs, access rules and data issue escalation, and approves the certification of reporting and the onboarding of any new personal or customer-level data into the data platform. Run the definitions process and hold the business glossary, building on the core metric definitions Finance and Insights already use, with business areas owning the definitions themselves.

Own data quality management: set data quality rules and standards with data owners; establish a data quality baseline; run issue management; and report regularly on the quality of the data used in Board and member-bank reporting, including key reference data such as the Banking Hub Register. The Lead Data Engineer builds and runs the automated checks in the pipelines and fixes issues up to the gold layer, data owners fix problems at source, and the Insights & Analysis team builds agreed definitions into the semantic models.

Own records management, retention and secure external document sharing, giving the organisation one agreed approach to what is kept, for how long, and how documents are shared outside Cash Access UK. This includes agreeing a retention schedule and applying it through Microsoft Purview retention policies and labels in Microsoft 365, and through the retention processes in the data platform.

Provide data governance input to change, projects and AI, including CRM and business application decisions, the AI Tools Register and AI use case reviews, and the data controls that support the AI and ML Policy, ensuring controls, including a DPIA where needed, are agreed before any new personal or customer-level data is brought into the data platform.

Maintain clear reporting on data governance maturity, data quality, supplier data risks, data found in unapproved tools and remediation for the Head of Data and Technology, the Risk Committee and relevant governance forums.

Reduce key-person dependency on the Head of Data and Technology by taking ownership of day-to-day data governance, evidence and supplier follow-through, and documenting the governance model so that it can be operated by others.

Benefits

We believe in helping our people to be well and do well, with a total rewards package that includes:

• Discretionary bonus
• 30 days’ annual leave, plus bank holidays
• Employer pension contributions of up to 15%
• Private medical insurance
• Life assurance at four times basic salary
• Flexible, remote working policy with occasional need to travel as and when required 
• The option to buy or sell annual leave

Salary

Minimum: 60000
Maximum: 70000
Currency: GBP
Pay period: Annual