Director, Enterprise Data Governance & Controls

About QuadReal Property Group  QuadReal Property Group is a global real estate investment, development and operating company headquartered in Vancouver, British Columbia. Its assets under management are $98.5 billion. From its foundation in Canada as a full-service real estate operating company, QuadReal has expanded its capabilities globally for investments in equity and debt in both the public and private markets. QuadReal invests directly through operating platforms in which it holds an ownership interest and via programmatic partnerships. QuadReal seeks to deliver strong investment returns while creating sustainable environments that bring value to the people and communities it serves. Now and for generations to come. QuadReal: Excellence lives here. www.quadreal.com Role Description: The Director, Enterprise Data Governance & Controls is accountable for two disciplines within QuadReal’s Risk & Integrated Assurance function: Business Controls and Enterprise Data Governance. The role reports to the VP, Risk & Integrated Assurance and turns the VP’s enterprise-wide mandate into one accountable operating model. The Director holds two mandates that work together as one. The first is running and maturing the Business Controls framework, anchored in COSO 2013, and extending it beyond ICFR into data controls, operational controls, and controls for AI and automation. The second is defining and governing the enterprise data those controls rely on, anchored in DAMA-DMBOK, covering data definitions, ownership, quality, and observability. Together they make QuadReal’s controls provable rather than assumed, and its data reliable enough to control. This is a build-phase role, not a steady-state one. It is measured by what ships and holds up under audit, not by frameworks authored, and by the difference between evidencing a control (retained, re-testable proof that it operated) and merely demonstrating that a job ran. The operating principle is simple: govern only what you deliver, and deliver only what you can stand behind. The first priority is proving the combined operating model through a focused pilot within the Real Estate Debt Program. Priorities that follow include scaling to more operating companies, AI governance, and expanded data coverage. The Director also supports the VP’s overall view of QuadReal’s risk and control environment and represents Business Controls and Data Governance in Risk & Integrated Assurance reporting.

1.  Business Controls Run QuadReal’s Business Controls framework day to day, anchored in COSO 2013 across all five components and 17 principles. Support the ICFR program end to end: annual scoping, risk assessment, control design, testing, remediation, and certification. Coordinate SOC 1 / ISAE 3402 fieldwork and evidence collection, work directly with external auditors (EY), and drive remediation before reporting to the VP and BCI. Extend COSO coverage beyond ICFR into operational controls, and set controls standards for AI and automation, at a pace the business can absorb. Build out the Controls Oversight Framework across data integrity controls, and IT general controls (ITGCs) and own error reporting, escalation, and remediation so leadership always has clear visibility. 2.  Enterprise Data Governance Define QuadReal’s enterprise data definitions, classifications, and Critical Data Elements (CDEs), anchored in DAMA-DMBOK. Own the data ownership and accountability model: name Data Owners, Stewards, and Custodians, and hold them accountable through a defined sign-off cadence. Deliver the enterprise business glossary in Microsoft Purview under a tiered governance model, and maintain metadata management, lineage standards, and dbt metadata synchronization across the platform. Set data quality thresholds and Trusted Layer certification criteria, and hold data observability (freshness, pipeline health, trust scores) to the same standard as financial controls. Align controls