Data Security & Governance Analyst:
On behalf of our client, Procom is searching for a Data Security & Governance Analyst for a 6-month role. This position is a hybrid position with 3 days onsite at our client’s Richmond office.
Job Description:
Our clients Enterprise Data Strategy & Services team is seeking a Contract Data Security & Governance Analyst to protect, classify, govern, and control access to enterprise data assets across the modern analytics platform. The role will operationalize data protection controls, sensitivity classification, metadata governance, and secure access management while enabling trusted analytics and AI use cases.
The contractor will work closely with Data Governance, Privacy, Security, Data Architecture, Platform Engineering, data owners, data stewards, and business stakeholders to establish compliant, auditable, and manageable controls.
Specific Responsibilities and Deliverables:
- Data Protection & Classification
- Identify and classify sensitive, confidential, and personal information within curated data products.
- Apply, validate, and maintain sensitivity of labels and information protection classifications.
- Support Privacy Impact Assessments (PIAs) and privacy compliance through appropriate classification and protection controls.
- Develop and maintain repeatable processes for ongoing data discovery, classification, labelling, and control validation.
- Data Governance & Metadata Management
- Support governance processes for data ownership, stewardship, metadata quality, data protection, and policy compliance.
- Validate that sensitivity classifications, ownership, lineage, and metadata are consistently represented across governance platforms.
- Assist with data lineage, metadata, and data catalogue management activities.
- Partner with data stewards and business stakeholders to strengthen governance practices and resolve quality issues.
- Unity Catalog Administration & Access Governance
- Administer and support Databricks Unity Catalog security and governance capabilities.
- Advise, design, and implement scalable role-based access control models aligned with the principle of least privilege.
- Create, manage, and maintain Databricks account groups, roles, entitlements, and permission structures, using Microsoft Entra ID groups where appropriate.
- Implement granular access to catalogs, schemas, tables, views, functions, volumes, and governed data products.
- Partner with data owners, data stewards, Privacy, Security, and Platform Engineering to translate business access requirements into manageable access patterns.
- Support onboarding, access requests, periodic access reviews, entitlement recertification, privileged access monitoring, and offboarding.
- Monitor and audit permissions, investigate access issues and permission conflicts, and manage approved governance exceptions.
- Develop standards, operating procedures, naming conventions, and reusable access patterns that reduce administrative effort and improve control.
- Support segregation of duties and avoid direct user grants where group-based authorization is more sustainable.
- Platform Security & Monitoring
- Monitor governance integrations and metadata synchronization across Databricks, OpenMetadata, and Microsoft Purview.
- Investigate and resolve issues involving data classification, sensitivity labels, lineage, metadata quality, and access controls.
- Support implementation and monitoring of governance policies and data protection controls.
- Participate in security reviews and governance assessments for new data products, analytics solutions, and AI use cases.
- Compliance & Risk Management
- Support compliance with applicable privacy, security, information management, and data governance standards.
- Monitor and report on data protection controls, access governance, and policy compliance.
- Identify, assess, document, and support mitigation of information protection and access risks.
Maintain operational procedures, decisions, control records, audit evidence, and issue-resolution documentation.
-
Mandatory Requirements:
- Experience in data governance, data security, information protection, privacy, identity and access management, or related discipline.
- Experience working with enterprise data platforms and modern cloud data environments.
- Knowledge of data classification, sensitivity labelling, information protection, and privacy-by-design practices.
- Experience implementing and administering data access controls using groups, roles, and data entitlements.
- Understanding of least privilege, segregation of duties, access reviews, and auditable access governance.
- Experience with data catalogues, metadata management, lineage, or data governance tools.
- Strong analytical, troubleshooting, documentation, communication, and stakeholder engagement skills.
Demonstrated experience with several of the following:
- Databricks and Unity Catalog administration
- Microsoft Purview or OpenMetadata or comparable catalogue platforms
- Microsoft Entra ID / Active Directory groups
- Role-based access control and entitlement management
- Sensitivity labeling
- Data Loss Prevention
- Azure data and analytics services
- SQL and data analysis tools
- Audit logging, control monitoring, and evidence management
- Data lineage and metadata management solutions
Preferred Qualifications:
- Experience supporting Privacy Impact Assessments and privacy compliance activities.
- Knowledge of applicable privacy legislation and privacy-by-design principles.
- Hands-on experience implementing Unity Catalog security models and governance controls.
- Experience integrating Databricks identities and groups with Microsoft Entra ID.
- Familiarity with DAMA-DMBOK or comparable data governance practices.
- Experience designing scalable, least-privilege access frameworks for enterprise analytics platforms.
Assignment Length:
This is a 6-month contract position.
Start Date:
ASAP.
Assignment Location:
Richmond, British Columbia, Canada. Hybrid work model with 3 days per week in the office.
