Data Protection / Data Governance Engineer

LONDON

1 DAY ONSITE

OUTSIDE IR35

£560 TO £640 PER DAY

ASAP START

This is an opportunity to build a data governance capability from the ground up within a growing organisation in the online gaming and gambling sector. They have recently completed a full audit of their data estate and are now investing in enterprise-wide governance, security, retention, and privacy controls. This contract will suit someone who enjoys delivering hands-on transformation projects and leaving behind a sustainable operating model.

The Company

They are a digital-first organisation operating within a highly regulated industry, supported by a large-scale data environment across cloud platforms, databases, and SaaS applications. Data governance has become a strategic priority, with strong support from senior leadership and the board. They are looking to establish robust governance processes that protect customer data while enabling continued innovation and growth.

The Role and Deliverables

• Design and implement a least-privilege access model across GCP and key SaaS platforms, including IAM, RBAC, service accounts, and access management workflows.
• Build and document governance controls using Terraform and infrastructure-as-code principles.
• Create a comprehensive data inventory and classification framework, mapping datasets to agreed retention and governance policies.
• Restructure BigQuery environments to support enforceable retention through partitioning, clustering, security controls, and automated expiration policies.
• Establish a practical DPIA process, including templates, workflows, and completed assessments for high-risk data flows.
• Deliver detailed runbooks, operating procedures, governance documentation, and a full handover package to ensure the internal team can continue operating the capability.

Your Skills & Experience

• Strong hands-on experience with GCP, including organisation policies, IAM conditions, resource hierarchy, and service account management.
• Expertise in BigQuery security, retention management, DLP, column and row-level security, and data classification.
• Strong Terraform or equivalent infrastructure-as-code experience.
• Technical GDPR knowledge covering retention, DSARs, DPIAs, lawful basis, and breach management.
• Proven experience implementing least-privilege and zero-trust security models within complex cloud environments.
• Experience governing personal data across SaaS platforms such as GA4, Meta, Salesforce, Braze, Zendesk, Iterable, Xtremepush, or similar.
• Demonstrated success delivering greenfield or large-scale governance transformation projects rather than BAU operations.
• Comfortable operating independently, taking ownership, and driving delivery across technical and non-technical stakeholder groups.