Senior Data Protection & Governance Engineer [Contract]

Location: Toronto-Remote

Time Type: Full time

Job Description

What will you work on?
Reporting to the Data Enablement & Protection Hub Director, you will be the primary architect and hands-on implementer for our entire Google-centric data security, access control, and compliance ecosystem. This is a builder role where you will design and deploy a robust data governance framework from the ground up across Google Workspace (GWS), Google Cloud Platform (GCP), and Google Cloud Storage (GCS).

This role is a full-time contract position with the opportunity to convert to permanent role.

How will you create impact?

• Implement and configure an Enterprise Data Catalog from scratch using Google Dataplex or Knowledge Catalog
• Design and deploy automated data classification frameworks and records retention lifecycles using Google Vault and Drive Labels
• Engineer and operate unified Data Loss Prevention (DLP) policies natively within the GWS and GCP environments
• Design and implement strict Role-Based (RBAC) and Attribute-Based (ABAC) access controls using GCP IAM to enforce least-privilege principles
• Build and maintain governance triggers and compliance workflows using Google Cloud-native automation tools, including Cloud Functions and GAM scripts
• Partner with Legal, InfoSec, and business stakeholders to translate complex compliance policies into scalable Google platform configurations

What are your skills and experience?

• Undergraduate degree in Computer Science, Information Security, or a related technical field
• Deep, hands-on expertise in configuring security and governance controls across Google Workspace (GWS) and Google Cloud Platform (GCP)
• Professional experience with Google Vault, GCS security, Dataplex/Knowledge Catalog, and advanced GCP IAM policy implementation
• Experience building SaaS DLP policies within GWS/GCP and implementing RBAC/ABAC access models
• Strong scripting and automation capabilities using Python and Google App Maker (GAM)
• Proven ability to lead technical whiteboarding sessions and translate complex GRC requirements into platform configurations

## LI-Remote ## LI-HM1

The anticipated pay range for candidates who will work in Ontario is $62.50 to $72.11 Per Hour. The offered pay to a successful candidate will be dependent on several factors that may include but are not limited to years of experience within the job, years of experience within the required industry, education, etc. Spin Master Inc. is a multi-state employer, and this salary range may not reflect positions that work only in other states.

This job posting is tied to an open vacancy.

What you can expect from us:

Our mission is to Make Life More Fun with a vision to push the boundaries of innovation, creativity, and fun.

• Growth and Career Opportunities

• Flexible Work Hours

• Innovation, Collaboration and Fun

• Comprehensive Benefits

• Other fun Perks!

What’s it like to work here?

Spin Master is a fast-paced, hands-on organization that provides many great opportunities for impactful decision-making; though our challenging start-up atmosphere isn’t for everyone, we have a proven record of opportunities for future advancement and internal transfers for our passionate and results driven team.

Everyone is welcome in our sandbox and we are committed to an accessible and inclusive hiring process that provides reasonable accommodation to all applicants.

Spin Master strives to create an accessible and inclusive application and selection process and is committed to working with and providing reasonable accommodation to job applicants who may require provisions to participate in the recruitment, selection and/or assessment processes. Should you require an accommodation, please contact our Talent Acquisition team, by email at TAinquiries@spinmaster.com or by phone at 416 364-6002 and we will work with you to meet your accessibility needs.

Follow us on Instagram and Twitter @SpinMaster to stay up to date on Spin Master career opportunities.

We do appreciate all interest; however only those selected for interview will be contacted.