Counsel, Data Governance & Records Retention

The Counsel for Data Governance & Records Retention reports to the Chief Cybersecurity and Technology Regulation Counsel within the Privacy Center of Excellence. This role is primarily focused on supporting Marsh's enterprise-wide Data Governance initiatives, with a strong emphasis on Records Retention compliance.

The Counsel will assist in developing, implementing, and maintaining data governance frameworks and records retention policies that ensure compliance with applicable laws, regulations, and business needs. This role requires close collaboration with Marsh’s multiple business units and enterprise/corporate partners to align governance strategies across the organization.

We will count on you to:

• Assist in the development and implementation of data governance policies, standards, and procedures to ensure compliance with regulatory obligations and contractual requirements.
• Maintain Marsh’s enterprise records retention policy and schedule, while collaborating with business stakeholders to ensure alignment with business operations and legal requirements.
• Support business stakeholders on business retention schedule interpretation, analysis, or implementation, in coordination with legal partners.
• Collaborate with legal, compliance, IT, and stakeholders across Marsh's diverse business units and corporate functions to ensure consistent application of data governance and records retention practices.
• Monitor and interpret emerging legal and regulatory developments, trends, and best practices related to data governance and records retention, advising on necessary policy or process adjustments.
• Participate in governance-related committees and working groups to provide legal perspectives on data management and retention issues.
• Assist in conducting legal reviews of data initiatives, systems, and processes to ensure compliance with applicable laws and internal policies.
• Support responses to regulatory inquiries, litigation holds, and data breach investigations as they relate to data governance and records retention.
• Help develop and deliver training and awareness programs on data governance and records retention best practices for business and legal teams.
• Collaborate with cybersecurity and privacy counsel to ensure alignment of data governance efforts with broader information security and privacy programs.
• Manage multiple projects and priorities effectively in a fast-paced, cross-functional environment.

What you need to have:

• A minimum of 3 years of attorney-level experience, preferably with a focus on data governance, records retention, information governance, or related legal and compliance areas.
• Licensed to practice law and in good standing with the applicable licensing authority

What makes you stand out:

• Strong knowledge of data governance frameworks, records retention laws, and information management regulations across multiple jurisdictions.
• Proven ability to analyze and interpret complex legal and regulatory requirements for data management, retention, and compliance.
• Experience supporting the development, implementation, and maintenance of data governance policies and procedures.
• Excellent written and verbal communication skills; able to explain legal concepts and compliance requirements to business and technical audiences.
• Collaborative approach working with cross-functional teams, including legal, compliance, IT, and business stakeholders across multiple units.
• Detail-oriented with strong organizational and project-management skills; able to manage competing priorities in a fast-paced environment.
• Committed to continuous professional development and staying current with evolving legal, regulatory, and industry trends in data governance and records retention.
• Experience working with or supporting cybersecurity, privacy, or information-security teams; familiarity with frameworks and regulations (e.g., NIST, SEC, NYDFS) is a plus.
• Exposure to enterprise-wide governance programs and multi-jurisdictional regulatory environments.
• Experience drafting or reviewing contracts and vendor agreements with data protection and records-management provisions.

Why join our team:

• Opportunities for professional development and career advancement within a global leader in the insurance industry.
• Be part of a supportive and inclusive work environment that values diverse perspectives and encourages innovation.
• Contribute to a company that is dedicated to excellence, integrity, and delivering exceptional value to clients.

The applicable base salary range for this role is $150,900 to $226,400 CAD.

The base pay offered will be determined on factors such as experience, skills, training, location, certifications, and education. Decisions will be determined on a case-by-case basis. In addition to the base salary, this position may be eligible for performance-based incentives.

We are excited to offer a competitive total rewards package which includes health and welfare benefits, tuition assistance, retirement programs as well as employee assistance programs.

Marsh (NYSE: MRSH) is a global leader in risk, reinsurance and capital, people and investments, and management consulting, advising clients in 130 countries. With annual revenue of over $24 billion and more than 90,000 colleagues, Marsh helps build the confidence to thrive through the power of perspective. For more information, visit corporate.marsh.com, or follow us on LinkedIn and X.

Marsh is committed to embracing a diverse, inclusive and flexible work environment. We aim to attract and retain the best people and embrace diversity of age background, disability, ethnic origin, family duties, gender orientation or expression, marital status, nationality, parental status, personal or social status, political affiliation, race, religion and beliefs, sex/gender, sexual orientation or expression, skin color, or any other characteristic protected by applicable law. In accordance with the Accessibility for Ontarians with Disabilities Act, 2005, Marsh will provide a reasonable accommodation to employees and prospective employees to the point of undue hardship upon request and as required in respect of the individual’s particular restrictions and limitations. If you require a specific accommodation because of a disability or medical need, please contact reasonableaccommodations@mmc.com.

Marsh is committed to hybrid work, which includes the flexibility of working remotely and the collaboration, connections and professional development benefits of working together in the office. All Marsh colleagues are expected to be in their local office or working onsite with clients at least three days per week. Office-based teams will identify at least one “anchor day” per week on which their full team will be together in person.

This is a New position.