Sr. Manager, Information Governance & Records Compliance

Weil seeks the best and brightest talent to join our Administrative Staff team. Our employees are the future of Weil so we invest in their training and development. Our environment embraces and encourages positive-minded professionals who seek to be challenged and acquire knowledge and skills in an atmosphere built on teamwork. Highly skilled and knowledgeable Administrative Staff assist our attorneys in successfully meeting and exceeding client needs and are vital to the overall success of the Firm.

Job Description

The Sr. Manager, Information Governance & Records Compliance leads the Firm's information governance and records compliance framework, overseeing the development and consistent enforcement of policies, controls, and reporting across all jurisdictions in which the Firm operates. The role serves as a strategic advisor and cross-functional leader to translate regulatory, client, retention, and AI governance requirements into practical standards, workflows, and oversight mechanisms strengthening the Firm’s overall compliance effectiveness.

Primary Responsibilities and/or Essential Functions:

• Ensure Information Governance and Records policies are optimized and enforced consistently across all jurisdictions throughout the information lifecycle in alignment with applicable regulatory requirements, data protection laws, and professional obligations governing Firm and client information.
• Lead the development and maturation of compliance frameworks, controls, and reporting across data retention, client requirements, and AI governance.
  • Define and document compliance standards, controls, and decision frameworks, and partner with IS and Facilities to align policy requirements with capabilities.
  • Translate policies into clear, actionable procedures and workflows.
  • Support the development and operationalization of Firm’s AI governance framework, including policies, controls, and oversight mechanisms, and the evaluation of relevant applications and services.
  • Partner with IT and Compliance to oversee the safeguarding of highly sensitive, confidential, and proprietary information retained by the Firm.
• Identify and remediate nonconformities in compliance through ongoing audits, assessment and continuous improvement initiatives.
  • Help identify and resolve critical data issues and drive measurable improvements in governance adoption and business outcomes.
  • Help identify data and physical documents across Firm repositories and manage efforts to organize, migrate, preserve, or prepare data for appropriate disposition.
• Define, implement, and enforce processes for data preservation and disposition.
  • Establish and maintain a comprehensive inventory of all data repositories across the Firm’s environment - including on-premise servers, databases, backup systems, cloud storage (e.g. Azure, M365, OneDrive), SaaS platforms, email archives, and endpoints - to ensure authoritative visibility into where Firm and client data resides.
  • Translate regulatory and client-specific requirements with respect to data retention, notification, disposition, and preservation into enforceable policies and workflows.
  • Execute and validate data disposition across the Firm's full technology stack - structured databases, unstructured file stores, cloud repositories, email systems, and third-party platforms - ensuring deletion and preservation is confirmed and defensible.
• Serve as the central point of coordination among compliance, legal personnel, IS, and business stakeholders to translate policy into practice and strengthen the firm’s overall risk and compliance posture.
  • Escalate issues to senior leadership and recommend corrective action.
  • Design and implement monitoring to assess and enforce adherence to policies.
  • Support training and guidance initiatives related to retention, disposition, and client requirements.
  • Establish and manage processes for policy exceptions, including documentation and risk assessment.
• Any additional responsibilities as required by management.

Knowledge, Skills & Ability:

• 6+ years of experience in IG, Risk, Compliance, or a related field.
• Experience within a law firm, legal department or professional services environment strongly preferred.
• Demonstrated experience implementing and monitoring compliance programs.
• Strong understanding of data privacy, regulatory requirements, ESI, and client confidentiality obligations, especially as they relate to legal matters.
• Working knowledge of enterprise data environments spanning on-premise and cloud infrastructure, including file servers, relational databases, and email platforms.
• Understanding of data deletion methods across storage types, including soft vs. hard delete distinctions, retention lock mechanisms, and backup/snapshot implications.
• Ability to multi-task and manage under extremely stressful situations and deadlines.
• Detail-oriented with exceptional project management skills.
• Independent worker who takes initiative and exhibits excellent time management skills.
• Excellent interpersonal and communication skills.
• Exhibits thoughtful and sound judgment in problem solving and relationship management.

Education/Certifications:

• Bachelor’s degree required.
• Relevant certifications such as IGP, CIPP, or CIP preferred.

Estimated salary range is $200,000 - $250,000. This position is bonus eligible. Compensation decisions within the range are dependent on the facts and circumstances of each case including but not limited to the individual's skills, experience, and qualifications.

Weil, Gotshal & Manges LLP offers a competitive compensation package comprised of base pay and discretionary year-end bonus for eligible employees.  Benefits include, but are not limited to medical, dental, vision, disability coverage, life insurance, flexible spending plan and a 401K plan.  Weil also offers generous paid time off and holidays.  All decisions affecting employment at Weil, Gotshal & Manges LLP are made on the basis of qualification, performance and other pertinent work-related factors, and without discrimination against any person on the basis of race, color, sex, age, religion, national origin, disability, marital status, sexual orientation, gender identity or expression, pregnancy, veteran’s status, genetic information or any other legally protected status.