Data Governance & Controls Assurance Consultant

About the role

The Data Governance & Controls Assurance Consultant provides independent advisory and assurance services on client data governance, security, and control frameworks. Working with audit, risk, technology and security stakeholders, the consultant evaluates policies, processes and evidence to ensure effective remediation of identified issues.

Key responsibilities

• Define risk‑based assurance scope, objectives, criteria, evidence needs and sampling approach.
• Review governance frameworks, policies, standards, RACI matrices, committee evidence and performance reporting.
• Assess control design and operating effectiveness across data quality, metadata, sharing, security, retention, platforms and analytics.
• Conduct interviews, walkthroughs, document reviews, sample testing and evidence validation.
• Identify design, implementation and evidence gaps, document findings and provide practical recommendations.
• Validate management responses, track remediation and perform follow‑up testing before closure.
• Identify systemic themes and recurring weaknesses across domains.
• Prepare concise assurance reports and facilitate factual‑clearance discussions.
• Maintain independence, confidentiality, working papers and evidence traceability.

Required profile

• Bachelor’s degree in audit, accounting, information systems, cybersecurity or a related field (or equivalent experience).
• 4‑8 years of experience in internal audit, technology audit, risk or assurance.
• Proven experience evaluating design and operating effectiveness and retaining defensible working papers.
• Experience writing findings and facilitating remediation discussions.
• Exposure to data platforms, governance frameworks, information security or regulated environments is preferred.

Required skills