About the Role
As a Senior Data Protection Governance Engineer, you will lead the deployment of a Microsoft-centric data security, access control, and compliance ecosystem. You will serve as the primary architect for Microsoft Purview, building a robust data governance architecture that translates complex business and regulatory requirements into automated, scalable security guardrails.
Responsibilities
- Implement and configure the Microsoft Purview Data Catalog for data discovery, lineage, and governance across the M365 ecosystem.
- Design and deploy a data classification framework using automated security labels, sensitivity labels, retention policies, and Records Management lifecycles.
- Engineer and deploy unified Data Loss Prevention (DLP) policies and configure Microsoft Purview Insider Risk Management (IRM).
- Implement access guardrails leveraging Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) using Microsoft Entra ID Conditional Access.
- Build Power Automate solutions integrating with SharePoint and M365 services to automate compliance workflows.
- Partner with Legal, InfoSec, and business units to translate compliance policies into Purview configurations.
Requirements
- Proven track record of end-to-end Microsoft Purview implementations including Information Protection, Insider Risk, Data Catalog, and Records Management.
- Deep technical experience building SaaS DLP policies within M365.
- Experience implementing advanced identity controls (RBAC/ABAC) in Azure/Entra ID.
- Strong development and scripting capabilities using Power Automate and PowerShell.
- Ability to lead technical whiteboarding sessions and translate GRC requirements into platform configurations.
- Working knowledge of global privacy and security frameworks including ISO 27001, ISO 42001, GDPR, and CCPA.
- Microsoft SC-400 certification is considered a strong asset.
- Experience with network DLP via Zscaler or PowerApps development is considered an asset.
Skills
- Microsoft Purview
- M365 Ecosystem
- Data Loss Prevention (DLP)
- Insider Risk Management (IRM)
- Role-Based Access Control (RBAC)
- Attribute-Based Access Control (ABAC)
- Microsoft Entra ID
- Power Automate
- PowerShell
- SharePoint
- Governance, Risk, and Compliance (GRC)
- ISO 27001
- ISO 42001
- GDPR
- CCPA
Location
- Remote
Work Type
- Full-time
- Contract
Salary/Compensations
- $62.50 to $72.11 Per Hour
Benefits
- Growth and Career Opportunities
- Flexible Work Hours
- Innovation, Collaboration and Fun
- Comprehensive Benefits
- Other fun Perks
About the Company
- Leading global children's toy, entertainment and digital gaming company.
- Mission to Make Life More Fun with a vision to push the boundaries of innovation, creativity, and fun.
- Fast-paced, hands-on organization with a challenging start-up atmosphere.
Equal Opportunity
- Everyone is welcome in our sandbox and we are committed to an accessible and inclusive hiring process that provides reasonable accommodation to all applicants.
- Spin Master strives to create an accessible and inclusive application and selection process and is committed to working with and providing reasonable accommodation to job applicants who may require provisions to participate in the recruitment, selection and/or assessment processes.
