Data Security & Governance Analyst (ID#5501)

New Value Solutions (NVS), a national IT consulting firm, is seeking an experienced Data Security & Governance Analyst to support the protection, classification, governance, and secure access of enterprise data assets across a modern analytics environment. The Analyst will work closely with Data Governance, Privacy, Security, Data Architecture, Platform Engineering, data owners, data stewards, and business stakeholders to operationalize data protection controls, sensitivity classification, metadata governance, and scalable access management while supporting trusted analytics and AI use cases. Responsibilities: Identify and classify sensitive, confidential, and personal information within curated enterprise data products. Apply, validate, and maintain sensitivity labels and information protection classifications. Support Privacy Impact Assessments (PIAs), privacy compliance activities, and privacy-by-design practices through appropriate classification and protection controls. Develop and maintain repeatable processes for data discovery, classification, labelling, and control validation. Support governance processes related to data ownership, stewardship, metadata quality, information protection, and policy compliance. Validate that sensitivity classifications, ownership, lineage, and metadata are accurately represented across enterprise governance platforms. Support data lineage, metadata management, and enterprise data catalogue activities. Work with data stewards and business stakeholders to strengthen governance practices and resolve data quality and metadata issues. Administer and support Databricks Unity Catalog security and governance capabilities. Design and implement scalable role-based access control models based on least-privilege principles. Create, manage, and maintain Databricks account groups, roles, entitlements, and permission structures, including integration with Microsoft Entra ID groups where appropriate. Implement granular access controls across catalogs, schemas, tables, views, functions, volumes, and governed data products. Translate business access requirements into sustainable and manageable access patterns in collaboration with data owners, Privacy, Security, and Platform Engineering teams. Support user onboarding, access requests, access reviews, entitlement recertification, privileged access monitoring, and offboarding. Monitor and audit permissions, investigate access issues and permission conflicts, and manage approved governance exceptions. Develop standards, operating procedures, naming conventions, and reusable access patterns that reduce administrative effort and improve control. Support segregation of duties and promote group-based authorization rather than direct user grants where appropriate. Monitor governance integrations and metadata synchronization across Databricks, OpenMetadata, and Microsoft Purview. Investigate and resolve issues related to data classification, sensitivity labels, lineage, metadata quality, and access controls. Support implementation and monitoring of governance policies, data protection controls, and information security requirements. Participate in security reviews and governance assessments for new data products, analytics solutions, and AI use cases. Monitor and report on data protection controls, access governance, policy compliance, and related risks. Identify, assess, document, and support mitigation of information protection and access-control risks. Maintain operational procedures, governance decisions, control records, audit evidence, and issue-resolution documentation. Requirements: Demonstrated experience in data governance, data security, information protection, privacy, identity and access management, or a related discipline. Experience working with enterprise data platforms and modern cloud data environments. Strong knowledge of data classification, sensitivity labelling, information protection, and privacy-by-design practices. Experience implementing and administering data access controls using groups, roles, and data entitlements. Strong understanding of least privilege, segregation of duties, access reviews, and auditable access governance. Experience with data catalogues, metadata management, data lineage, or data governance platforms. Strong analytical, troubleshooting, documentation, communication, and stakeholder-engagement skills. Demonstrated experience with several of the following: Databricks and Unity Catalog administration. Microsoft Purview, OpenMetadata, or comparable data catalogue platforms. Microsoft Entra ID / Active Directory groups. Role-based access control and entitlement management. Sensitivity labelling and information protection. Data Loss Prevention (DLP). Azure data and analytics services. SQL and data analysis tools. Audit logging, control monitoring, and evidence management. Data lineage and metadata-management solutions. Hands-on experience implementing Unity Catalog security models and governance controls is strongly preferred. Experience integrating Databricks identities and groups with Microsoft Entra ID is preferred. Experience supporting Privacy Impact Assessments and privacy compliance activities is considered an asset. Knowledge of applicable privacy legislation and privacy-by-design principles is considered an asset. Familiarity with DAMA-DMBOK or comparable data governance practices is considered an asset. Experience designing scalable, least-privilege access frameworks for enterprise analytics platforms is preferred. If you have strong hands-on experience with enterprise data governance, Databricks Unity Catalog, Microsoft Entra ID, access governance, metadata management, and data protection controls, and are available for a full-time six-month engagement beginning September 1, 2026, please submit your resume. While we thank all candidates in advance for their application, only those candidates who are shortlisted will be contacted. ID#5501 Questions: How many years of hands-on experience do you have administering Databricks Unity Catalog, including catalogs, schemas, permissions, groups, roles, and entitlements? Have you implemented Databricks access controls using Microsoft Entra ID groups, RBAC, least-privilege principles, and group-based authorization? What hands-on experience do you have with Microsoft Purview, OpenMetadata, sensitivity labelling, data classification, metadata management, and data lineage? Have you managed enterprise access-governance activities such as access reviews, entitlement recertification, segregation of duties, privileged access, audit evidence, or Privacy Impact Assessments? Are you able to start September 1, 2026 and work onsite at the client’s Richmond, BC office at least 3 days per week for the 6-month engagement?

The analyst will operationalize data protection controls, sensitivity classification, and scalable access management within a modern analytics environment. They will specifically administer Databricks Unity Catalog security and collaborate with stakeholders to maintain metadata governance and privacy compliance.

Candidates need demonstrated experience in data governance, security, and identity access management, with a strong preference for hands-on expertise in Databricks Unity Catalog and Microsoft Entra ID. Proficiency in data classification, privacy-by-design practices, and the use of data catalogs like Microsoft Purview is required.

• SQLSouhaitée

Relevées dans la description du poste. Confirmez les exigences importantes ci-dessus.

• Data Governance
• Data Security
• Databricks Unity Catalog
• Microsoft Purview
• Microsoft Entra ID
• Role-Based Access Control
• Data Classification
• Metadata Management
• Privacy Impact Assessments
• Data Lineage
• Information Protection
• Least Privilege Principles
• OpenMetadata
• SQL
• Azure Data Services
• Data Loss Prevention

• Data & Analytics
• Security & Safety
• Technology
• Consulting
• Software

Expérience minimale

5+ ans

Postuler avant le

18 sept. 2026

Langue de l’offre

anglais

Heures de travail

40 heures par semaine

Présence au bureau

3 jours par semaine

Niveau d’expérience

Mid-Senior level

Mode de candidature

La candidature directe est offerte