The Data Governance & Resilience Analyst is responsible for discovering, cataloging, and classifying organizational data assets to support security, governance, compliance, business continuity, and AI readiness.

This role operates within the information security and risk management domain, with a primary focus on data governance and oversight. The position is responsible for identifying where data resides, understanding what data exists across the organization, and ensuring it is appropriately classified. It supports compliance by assessing data against operational requirements, regulatory obligations, and risk management standards, helping safeguard the organization’s information, assets and maintain strong governance practices.

The role collaborates closely with the data analytics team and other subject matter experts to ensure accurate data discovery and alignment across data sources.

Primary Responsibilities Data Discovery & Asset Management

• Conduct systematic data discovery and inventory across on-premises, cloud, and hybrid environments to identify and catalog all data repositories.
• Map data flows between systems to support impact analysis and architectural decision-making.
• Maintain an authoritative data inventory and data lineage documentation to ensure visibility remains current as systems, integrations, and data flows evolve.

Data Governance & Classification

• Implement and maintain data classification frameworks aligned with organizational risk appetite and regulatory requirements.
• Establish governance policies, roles, and accountability structures in collaboration with data owners.
• Define data quality standards and support the tracking of metrics for completeness, accuracy, and consistency in collaboration with data owners and system teams.
• Facilitate data stewardship activities and enforce metadata management practices.

Compliance & Regulatory Alignment

• Ensure data handling practices comply with federal and provincial privacy legislation and sector-specific regulations, in collaboration with Legal, Privacy, Security, and IT stakeholders.
• Document data processing activities, retention schedules, and disposal procedures for regulatory requirements.
• Support audit and compliance reporting with evidence of governance controls.

Business Continuity & Data Availability

• Assess criticality of data assets to support Business Impact Analysis (BIA) and recovery prioritization.
• Monitor data availability metrics and coordinate with IT teams to address resilience gaps.
• Identify data dependencies for critical business processes to support continuity planning.

AI Readiness Assessment

• Identify data gaps, bias risks, or compliance barriers to responsible AI adoption.
• Establish data readiness scoring frameworks and document governance, ethics, and risk considerations for AI-enabled applications.

Desired Qualifications

• A diploma or bachelor's degree in Information Management, Information Systems, Computer Science, Cybersecurity, or a related field is required.
• Three (3) to five (5) years of experience in data governance, information management, compliance roles is desired.
• Foundational knowledge of data governance frameworks, data classification schemes, and privacy regulations such as PIPEDA, GDPR.
• Familiarity with data catalog platforms, metadata management tools, SQL databases, and cloud data storage environments is an asset.
• Strong analytical and documentation skills with the ability to create clear process maps, data flow diagrams, and governance documentation.
• Effective written and verbal communication skills, with the ability to translate technical concepts for non-technical stakeholders and collaborate across IT, security, legal, and business teams.
• Industry certifications such as CDPSE or CIPP/C are considered an asset.

Terms Of Employment

• This is a full-time position based on a 37.5 hour work week from Monday through Friday, with potential participation in after-hour duties as required.
• This position requires a physical presence at the office, with opportunities for hybrid work based on team availability and management discretion.
• This is a salaried position, commensurate with experience and qualifications.
• Must be able to pass a basic security clearance.