Senior Manager: Information Governance Compliance

Overview

Mayer Brown is an international law firm positioned to represent the world’s major corporations, funds, and financial institutions in their most important and complex transactions and disputes. We are recognized by our clients as strategic partners with deep commercial instincts and a commitment to creatively anticipating their needs and delivering excellence in everything we do. We are a collegial, collaborative firm where highly motivated individuals with an unwavering commitment to excellence receive the opportunity, support, and development they need to grow, thrive, and realize their greatest potential all while supporting the Firm’s client service principles of excellence, strategic partnership, commercial instinct, integrated strengths, innovation, and collaboration across our international firm.

If you enjoy working with team members whose defining characteristics are exceptional client service, initiative, professionalism, responsiveness, and adaptability, you may be the person we are seeking to join our Information Governance department in our New York, Chicago, or Washington, D.C. office, as an Senior Manager:
Information Governance Compliance.

The Senior Manager:
Information Governance Compliance is responsible for ensuring the firm’s Information Governance (IG) policies are operationalized, monitored, and enforced in a consistent, measurable, and defensible manner. This includes alignment with applicable regulatory requirements, data protection laws, and professional ethics obligations related to the handling of firm and client information. This role will lead the development of compliance frameworks, controls, and reporting across key IG domains, including data retention, legal holds, client requirements, access controls, and AI governance.

Reporting to the Director:
Global Information Governance, the Senior Manager will be responsible for identifying and remediating gaps in compliance through ongoing assessment and continuous improvement initiatives. The position serves as a central point of coordination across IG, Legal Risk Management (LRM), Information Technology (IT), and business stakeholders to translate policy into practice and strengthen the firm’s overall risk and compliance posture. This role is empowered to escalation compliance concerns to senior leadership and to recommend corrective action to ensure the firm's policies are consistently upheld.

Essential Functions:

Policy Operationalization & Control Frameworks

• Translate IG policies (e.g., retention, data classification, legal holds, AI governance) into clear, actionable procedures and workflows
• Define and document compliance standards, controls, and decision frameworks
• Partner with IT to align policy requirements with system capabilities (e.g., Microsoft Purview, iManage)
• Identify and remediate gaps between policy requirements and current-state practices

Compliance Monitoring & Assurance

• Design and implement ongoing monitoring processes to assess adherence to IG policies
• Develop and maintain dashboards and reporting to provide visibility into compliance across systems and user groups
• Conduct periodic control testing and compliance reviews
• Identify trends, risks, and areas of non-compliance and drive remediation efforts

Legal Holds Governance & Oversight

• Establish and maintain the governance framework for legal holds, including roles, responsibilities, and workflows
• Partner with LRM to ensure legal holds are consistently implemented and managed across systems
• Monitor compliance with legal hold requirements, including timely application and release
• Support audit readiness and defensibility related to legal hold processes

Client Requirements & Outside Counsel Guidelines (OCGs) Compliance

• Develop and manage a structured approach to reviewing and operationalizing client OCGs
• Translate client-specific requirements (e.g., retention, notification, destruction, AI usage, data handling) into enforceable policies and workflows
• Define and oversee processes for client notification requirements related to data destruction, where applicable
• Maintain visibility into client-driven restrictions and ensure alignment across IG…