Data Governance Product Manager

ASSYST is seeking a Data Classification Product Manager for one of our client in Rockville, MD. The Data Classification Product Manager will lead the development, implementation, and enterprise-wide adoption of the County’s data classification framework. This strategic role ensures that sensitive data is appropriately labeled, governed, and protected in compliance with internal policies and external regulations. As the product owner, you will collaborate across Legal, Compliance, Security, IT, and Business Units to build and operationalize data governance policies—leveraging tools such as Microsoft Purview and Microsoft 365 Compliance solutions.

Job Title: Data Classification Product Manager
Location: Rockville, MD
Duration: 12 Months

Key Responsibilities:

• Define and drive the vision, goals, and roadmap for the enterprise data classification product.
• Translate regulatory, legal, and business requirements into product features and deliverables.
• Manage the product backlog and prioritize enhancements based on compliance impact and business value.
• Act as the primary liaison among stakeholders including Legal, Security, IT, and Records Management teams.
• Develop and maintain data classification policies, taxonomy, and protection standards (e.g., Confidential, Internal, Public).
• Establish governance structures and enforcement mechanisms to ensure consistent adoption.
• Ensure alignment with regulatory standards including HIPAA, CJIS, PCI-DSS, GDPR, and others.
• Lead implementation of Microsoft Purview and M365 Information Protection tools.
• Configure and maintain Sensitivity Labels, DLP policies, Retention Labels, and other compliance features.
• Deliver metrics and reporting dashboards to track classification adoption, compliance posture, and program effectiveness.
• Drive awareness and adoption of classification practices across departments.
• Develop and execute training and communication plans to support change readiness.
• Collect feedback and usage data to iterate and improve the classification product experience.

Qualifications:

• Bachelor’s degree in Information Governance, Business Administration, Cybersecurity, Information Systems, or a related field.
• Demonstrated experience as a Product Manager or Product Owner, ideally in data governance, security, or compliance contexts.
• Strong understanding of data classification, retention, and lifecycle management.
• Hands-on experience with Microsoft Purview, M365 Compliance Center, and Information Protection technologies.
• Working knowledge of regulatory frameworks such as NIST, CJIS, CCPA, GDPR, HIPAA, and PCI-DSS.
• Experience working with IT and Security teams on technical implementations.
• Excellent communication, facilitation, and stakeholder engagement skills.
• Strong analytical mindset; comfortable using tools like Power BI to track and report on compliance metrics.
• Ability to balance multiple priorities and align diverse teams toward a unified objective.
• Preferred certifications: PMP, CIPP, CIPT, or other relevant data governance or security credentials.
• Familiarity with broader M365 security tools, including Microsoft Entra and Defender.

ASSYST is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, disability, military status, national origin or any other characteristic protected under federal, state, or applicable local law.