Lead, Data Governance

Alpaca

Lead data governance and security for Alpaca, a global brokerage infrastructure provider serving financial institutions through institutional-grade APIs. Managing access, classification, quality, compliance evidence, and AI data guardrails across the remote Americas team.

Posted 8/12/2026full-timeRemote • 🏈 Anywhere in North AmericaSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in data governance, data security, and compliance frameworks, with a strong focus on implementing data access governance and quality standards. Proficient in managing data classification, entitlement reviews, and regulatory audits while collaborating effectively with engineering teams.

Highest-signal resume keywords

Data GovernanceData SecurityGRCSQL EnginesDAMA-DMBOK

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Data ClassificationAccess ControlEntitlement ReviewData Quality StandardsData Inventory ManagementMetadata DocumentationData Risk ManagementGDPR ComplianceSOC 2 Audit SupportNIST Framework

Soft Skills

Strong Communication SkillsOrganizedDetail-OrientedAbility to Work Independently

Tools & Technologies

Apache RangerTrinoDbtCubeMetabaseAirflowLakehouseBI ToolsCloud Data PlatformsAnalytics Tools

Certifications & Qualifications

CIPTCIPMCISMCISSPCDMPCRISC

Industry Keywords

FintechBrokerageRegulated Financial ServicesCross-Border DataPII HandlingISO 27001CSA STARPrivacy EngineeringEnterprise Risk ManagementOperational Risk

Tech Stack

Tools & technologies

AirflowApacheCloudETLGoogle Cloud PlatformSQL

About the role

Key responsibilities & impact

Build and maintain data governance policies, classification standards, ownership model, and exception process
Own data access governance for the lakehouse and analytics stack, including entitlement standards, periodic access reviews, and least-privilege access
Work with Data Engineering on Ranger policies, schema restrictions, and service account management
Set data quality standards and help Data teams track and improve against them
Maintain data inventory, metadata, and lineage documentation for compliance and audit purposes
Review data-related vendors and new analytics, reverse ETL, AI, notebook, and similar use cases with Security, Privacy, and Legal
Support sensitive and cross-border data requests, including PII handling and regional data flows
Prepare evidence for SOC 2, ISO 27001, CSA STAR, partner security reviews, and regulatory exams
Track data risks and control gaps as part of the Enterprise Risk Management program
Serve as the governance partner for Data and Security on access, classification, and tooling questions
Help define guardrails for AI and agentic use of corporate data in analytics workflows

Requirements

What you’ll need

5+ years in data governance, data security, GRC, privacy engineering, or a related field
At least 2 years working with modern data platforms, including lakehouse/warehouse, SQL engines, BI, and semantic layers
Solid grasp of data governance frameworks such as DAMA-DMBOK and NIST
Experience building or running data classification, access control, or entitlement review programs
Familiarity with cloud data platforms; GCP is a plus
Working knowledge of GDPR, CCPA, cross-border transfers, and related financial-services privacy and regulatory requirements
Experience supporting SOC 2, ISO 27001, or similar audits
Ability to work effectively with engineering teams and implement appropriate controls
Strong written and verbal communication skills
Organized, detail-oriented, and comfortable in a fast-paced remote environment
Comfortable working as an individual contributor with no direct reports
Fintech, brokerage, or regulated financial services background is a nice-to-have
Hands-on experience with Trino, Apache Ranger, dbt, Cube, Metabase, Airflow, or Iceberg is a nice-to-have
Experience reviewing AI/ML and analytics tools is a nice-to-have
Privacy program or vendor/DPA review experience is a nice-to-have
CIPT, CIPM, CISM, CISSP, CDMP, CRISC, or similar certifications are nice-to-haves
Experience with Japan or EU data residency and cross-border data issues is a nice-to-have
Exposure to ERM or operational risk is a nice-to-have

Benefits

Comp & perks

Competitive Salary & Stock Options
Health Benefits
New Hire Home-Office Setup: One-time USD $500
Monthly Stipend: USD $150 per month via a Brex Card