Senior Data Protection & Governance Engineer [Contract]

What will you work on?
As the Senior Data Protection & Governance Engineer, you will lead the deployment of our Microsoft-centric data security, access control, and compliance ecosystem. Serving as the primary architect and implementer for Microsoft Purview, you will build a robust data governance architecture from the ground up, translating complex business and regulatory requirements into automated, scalable security guardrails.

This role is a full-time contract position with the opportunity to convert to permanent role.

How will you create impact?

• Implement and configure the Microsoft Purview Data Catalog to enable data discovery, lineage, and governance across the M365 ecosystem.

• Design and deploy a data classification framework utilizing automated security labels, sensitivity labels, retention policies, and comprehensive Records Management lifecycles.

• Engineer and deploy unified Data Loss Prevention (DLP) policies and configure Microsoft Purview Insider Risk Management (IRM) to detect and mitigate internal data threats.

• Implement strict access guardrails leveraging Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) using Microsoft Entra ID Conditional Access.

• Build Power Automate solutions integrating with SharePoint and other M365 services to automate compliance workflows and governance triggers.

• Partner with Legal, InfoSec, and business units to translate compliance policies into Purview configurations while driving structured onboarding and adoption activities.

What are your skills and experience?

• Proven track record of end-to-end implementations of Microsoft Purview from scratch to production, including Information Protection, Insider Risk, Data Catalog, and Records Management.

• Deep technical experience building SaaS DLP policies within M365 and implementing advanced identity controls (RBAC/ABAC) in Azure/Entra ID.

• Strong development and scripting capabilities using Power Automate and PowerShell to connect triggers to SharePoint and M365 APIs.

• Demonstrated ability to lead technical whiteboarding sessions and translate complex governance, risk, and compliance (GRC) requirements into platform configurations.

• Working knowledge of global privacy and security frameworks, including ISO 27001, ISO 42001, GDPR, and CCPA.

• Microsoft SC-400 (Information Protection Administrator) or other relevant Microsoft security certifications are considered a strong asset.

• Experience with network DLP via Zscaler or PowerApps development is considered an asset.

#LI-Remote #LI-HM1

The anticipated pay range for candidates who will work in Ontario is $62.50 to $72.11 Per Hour. The offered pay to a successful candidate will be dependent on several factors that may include but are not limited to years of experience within the job, years of experience within the required industry, education, etc. Spin Master Inc. is a multi-state employer, and this salary range may not reflect positions that work only in other states.

This job posting is tied to an open vacancy.

What you can expect from us:

Our mission is to Make Life More Fun with a vision to push the boundaries of innovation, creativity, and fun.

• Growth and Career Opportunities

• Flexible Work Hours

• Innovation, Collaboration and Fun

• Comprehensive Benefits

• Other fun Perks!

What’s it like to work here?

Spin Master is a fast-paced, hands-on organization that provides many great opportunities for impactful decision-making; though our challenging start-up atmosphere isn’t for everyone, we have a proven record of opportunities for future advancement and internal transfers for our passionate and results driven team.

Everyone is welcome in our sandbox and we are committed to an accessible and inclusive hiring process that provides reasonable accommodation to all applicants.

Spin Master strives to create an accessible and inclusive application and selection process and is committed to working with and providing reasonable accommodation to job applicants who may require provisions to participate in the recruitment, selection and/or assessment processes. Should you require an accommodation, please contact our Talent Acquisition team, by email at [email protected] or by phone at 416 364-6002 and we will work with you to meet your accessibility needs.

Follow us on Instagram and Twitter @SpinMaster to stay up to date on Spin Master career opportunities.

We do appreciate all interest; however only those selected for interview will be contacted.