Matthew Gann

About Matthew Gann

Senior Data Governance and Risk Leader with 25+ years of experience driving enterprise-scale data lifecycle modernization, regulatory remediation, and operational risk reduction across financial services and federal environments. Proven ability to identify and escalate data risk, strengthen control frameworks, and secure audit closure in highly regulated organizations. Experience governing portfolios exceeding 1,500 applications and partnering across Legal, Risk, and Technology to deliver scalable, automation-enabled governance solutions.

Experience

1. Principal Data Management (Records Retention Information Retention)

   Discover

   Jan 2025 — Present · Riverwoods, IL, US

   Directed remediation and validation of enterprise retention controls across 1,500 applications, securing audit approval and formal closure of compliance findings while mitigating regulatory and operational data risk• Led enterprise retention governance strategy during transition to Capital One environment, aligning lifecycle controls with financial regulatory, privacy, and enterprise data management standards• Developed and implemented enterprise data migration playbook governing application rationalization, privacy controls, legal holds, and risk-based disposition decisions to reduce downstream compliance exposure• Reduced corporate retention schedule complexity by 60%(203 to 79 entries), strengthening policy clarity, governance adoption, and regulatory defensibility• Led cross-functional modernization initiative across Legal, Risk, IT, and Data stakeholders, establishing scalable and automated disposition and legal hold governance processes• Achieved 100% participation across 600 applications in enterprise retention risk assessment initiative, proactively identifying and escalating high-risk data management gaps for remediation• Partnered with executive stakeholders to remediate six high-priority regulatory risk issues, achieving on-time regulatory acceptance• Served as senior advisor on financial regulatory requirements, NIST standards, GDPR compliance, and enterprise data risk implications

Education

• Georgia Institute of Technology

  Bachelor of Science (BS), Management

• The Catholic University of America

  Master of Science - MS, Library and Information Science

Skills

• Document Management
• Archives
• Hummingbird Dm
• Html
• Public Trust
• Strategy
• Expert Advisor
• Teamwork
• Microsoft Office
• Analysis
• Information Governance
• Requirements Analysis
• Project Management
• Requirements Gathering
• Communication
• Consulting
• Use Case Analysis
• Sharepoint
• Management
• Records Management
• Customer Service
• Filesurf
• Edrms