Please Note: If you are a current Spin Master employee with access to Workday, apply to this job via the Workday application.
What will you work on?
As the Senior Data Protection & Governance Engineer, you will lead the deployment of our Microsoft-centric data security, access control, and compliance ecosystem. Serving as the primary architect and implementer for Microsoft Purview, you will build a robust data governance architecture from the ground up, translating complex business and regulatory requirements into automated, scalable security guardrails.
This role is a full-time contract position with the opportunity to convert to permanent role.
How will you create impact?
Implement and configure the Microsoft Purview Data Catalog to enable data discovery, lineage, and governance across the M365 ecosystem.
Design and deploy a data classification framework utilizing automated security labels, sensitivity labels, retention policies, and comprehensive Records Management lifecycles.
Engineer and deploy unified Data Loss Prevention (DLP) policies and configure Microsoft Purview Insider Risk Management (IRM) to detect and mitigate internal data threats.
Implement strict access guardrails leveraging Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) using Microsoft Entra ID Conditional Access.
Build Power Automate solutions integrating with SharePoint and other M365 services to automate compliance workflows and governance triggers.
Partner with Legal, InfoSec, and business units to translate compliance policies into Purview configurations while driving structured onboarding and adoption activities.
What are your skills and experience?
Proven track record of end-to-end implementations of Microsoft Purview from scratch to production, including Information Protection, Insider Risk, Data Catalog, and Records Management.
Deep technical experience building SaaS DLP policies within M365 and implementing advanced identity controls (RBAC/ABAC) in Azure/Entra ID.
Strong development and scripting capabilities using Power Automate and PowerShell to connect triggers to SharePoint and M365 APIs.
Demonstrated ability to lead technical whiteboarding sessions and translate complex governance, risk, and compliance (GRC) requirements into platform configurations.
Working knowledge of global privacy and security frameworks, including ISO 27001, ISO 42001, GDPR, and CCPA.
Microsoft SC-400 (Information Protection Administrator) or other relevant Microsoft security certifications are considered a strong asset.
Experience with network DLP via Zscaler or PowerApps development is considered an asset.
#LI-Remote #LI-HM1
The anticipated pay range for candidates who will work in Ontario is $62.50 to $72.11 Per Hour. The offered pay to a successful candidate will be dependent on several factors that may include but are not limited to years of experience within the job, years of experience within the required industry, education, etc. Spin Master Inc. is a multi-state employer, and this salary range may not reflect positions that work only in other states.
This job posting is tied to an open vacancy.
What you can expect from us:
