Data Protection / Data Governance Engineer
LONDON
1 DAY ONSITE
OUTSIDE IR35
£560 TO £640 PER DAY
ASAP START
This is an opportunity to build a data governance capability from the ground up within a growing organisation in the online gaming and gambling sector. They have recently completed a full audit of their data estate and are now investing in enterprise-wide governance, security, retention, and privacy controls. This contract will suit someone who enjoys delivering hands-on transformation projects and leaving behind a sustainable operating model.
The Company
They are a digital-first organisation operating within a highly regulated industry, supported by a large-scale data environment across cloud platforms, databases, and SaaS applications. Data governance has become a strategic priority, with strong support from senior leadership and the board. They are looking to establish robust governance processes that protect customer data while enabling continued innovation and growth.
The Role and Deliverables
Design and implement a least-privilege access model across GCP and key SaaS platforms, including IAM, RBAC, service accounts, and access management workflows.
Build and document governance controls using Terraform and infrastructure-as-code principles.
Create a comprehensive data inventory and classification framework, mapping datasets to agreed retention and governance policies.
Restructure BigQuery environments to support enforceable retention through partitioning, clustering, security controls, and automated expiration policies.
Establish a practical DPIA process, including templates, workflows, and completed assessments for high-risk data flows.
Deliver detailed runbooks, operating procedures, governance documentation, and a full handover package to ensure the internal team can continue operating the capability.
Your Skills & Experience
Strong hands-on experience with GCP, including organisation policies, IAM conditions, resource hierarchy, and service account management.
Expertise in BigQuery security, retention management, DLP, column and row-level security, and data classification.
Strong Terraform or equivalent infrastructure-as-code experience.
Technical GDPR knowledge covering retention, DSARs, DPIAs, lawful basis, and breach management.
Proven experience implementing least-privilege and zero-trust security models within complex cloud environments.
Experience governing personal data across SaaS platforms such as GA4, Meta, Salesforce, Braze, Zendesk, Iterable, Xtremepush, or similar.
Demonstrated success delivering greenfield or large-scale governance transformation projects rather than BAU operations.
Comfortable operating independently, taking ownership, and driving delivery across technical and non-technical stakeholder groups.
