Senior Data Protection & Governance Engineer [Contract]

Please Note: If you are a current Spin Master employee with access to Workday, apply to this job via the Workday application. Are you a kid at heart looking to build a career with a leading global children's toy, entertainment and digital gaming company? At Spin Master, our unwavering commitment to open mindedness, integrity and innovation is a great part of what has made us an industry leader. How do we stay ahead of the pack? By hiring the best and brightest minds—and that’s why we want you! Job Description: What will you work on? Reporting to the Data Enablement & Protection Hub Director, you will be the primary architect and hands-on implementer for our entire Google-centric data security, access control, and compliance ecosystem. This is a builder role where you will design and deploy a robust data governance framework from the ground up across Google Workspace (GWS), Google Cloud Platform (GCP), and Google Cloud Storage (GCS). This role is a full-time contract position with the opportunity to convert to permanent role. How will you create impact? Implement and configure an Enterprise Data Catalog from scratch using Google Dataplex or Knowledge Catalog Design and deploy automated data classification frameworks and records retention lifecycles using Google Vault and Drive Labels Engineer and operate unified Data Loss Prevention (DLP) policies natively within the GWS and GCP environments Design and implement strict Role-Based (RBAC) and Attribute-Based (ABAC) access controls using GCP IAM to enforce least-privilege principles Build and maintain governance triggers and compliance workflows using Google Cloud-native automation tools, including Cloud Functions and GAM scripts Partner with Legal, InfoSec, and business stakeholders to translate complex compliance policies into scalable Google platform configurations What are your skills and experience? Undergraduate degree in Computer Science, Information Security, or a related technical field Deep, hands-on expertise in configuring security and governance controls across Google Workspace (GWS) and Google Cloud Platform (GCP) Professional experience with Google Vault, GCS security, Dataplex/Knowledge Catalog, and advanced GCP IAM policy implementation Experience building SaaS DLP policies within GWS/GCP and implementing RBAC/ABAC access models Strong scripting and automation capabilities using Python and Google App Maker (GAM) Proven ability to lead technical whiteboarding sessions and translate complex GRC requirements into platform configurations #LI-Remote #LI-HM1 The anticipated pay range for candidates who will work in Ontario is $62.50 to $72.11 Per Hour. The offered pay to a successful candidate will be dependent on several factors that may include but are not limited to years of experience within the job, years of experience within the required industry, education, etc. Spin Master Inc. is a multi-state employer, and this salary range may not…