Data Governance Manager

The Data Governance Manager is responsible for how Cash Access UK’s data is defined, owned, classified, protected, shared and retained, inside the data platform and everywhere else it lives. The role works closely with business data owners, the Insights & Analysis team, the Lead Data Engineer, the Cyber Security Manager, Risk, Compliance, the outsourced Data Protection Officer and the Head of Data and Technology to establish what data the organisation holds and ensure it is governed consistently.

Microsoft Purview is the organisation’s central tool for data governance and information protection. The Data Governance Consultant is establishing the data governance framework in Purview, starting with the data platform, and data loss prevention, sensitivity labelling and retention across Microsoft 365 will follow. The Data Governance Manager takes ownership of Purview and the framework as they land, leads their expansion across the organisation, embeds them with business data owners and stewards, and is responsible for operating and developing them from then on, with the Head of Data and Technology remaining accountable for data governance.

This is a hands-on governance role where the post holder works directly in Microsoft Purview and with business teams, rather than an advisory or policy-writing role. The Data Governance Manager is responsible for Microsoft Purview, the data inventory, data classification and protection, the business glossary and the definitions process, data quality management, records and retention, and the data aspects of supplier due diligence.

The role supports the Cyber Security Manager’s response to shadow IT by providing the data input to the non-standard request route, identifying where data is held in unapproved SaaS and AI tools, and bringing that data back into governed systems. It also supports ongoing supplier due diligence from a data perspective, working with Risk, Cyber and the Data Protection Officer on the data each supplier receives or provides, Data Protection Impact Assessments and data processing agreements.

In the first year, the priorities are to:

• name data owners and stewards for the critical data areas, with agreed definitions for the measures used in Board and member reporting;
• establish a data quality baseline and report on it regularly;
• take over Purview’s catalogue and lineage for the data platform and keep them working;
• start sensitivity labelling and data loss prevention, beginning with the most sensitive SharePoint content;
• agree a retention schedule, the Data Classification Policy and the Records Management and Retention Policy.

The wider Microsoft 365 rollout then follows at a pace agreed with the Head of Data and Technology.

The role will also help set the organisation on a longer-term path towards stronger data governance maturity, including data flow documentation, the wider rollout of labelling and data loss prevention, and the data controls that allow Microsoft Copilot and other approved AI tools to be used safely, ensuring that any improvements are proportionate, achievable and aligned to business risk.

The role also acts as a business partner within the IT function, working with Finance, Risk, Compliance, Projects, Change and wider business teams to make data governance practical, proportionate and enabling. It helps unblock data-related delivery issues, clarify ownership and definitions, coordinate supplier action, and ensure governance is embedded into how the organisation handles data without becoming a blocker to business outcomes.