On behalf of our public-sector client, Affinity is seeking a Data Security & Governance Analyst to protect, classify, govern, and control access to enterprise data assets across the modern analytics platform. The role will operationalize data protection controls, sensitivity classification, metadata governance, and secure access management while enabling trusted analytics and AI use cases.

Responsibilities

- Data Protection & Classification
- Identify and classify sensitive, confidential, and personal information within curated data products.
- Apply, validate, and maintain sensitivity of labels and information protection classifications.
- Support Privacy Impact Assessments (PIAs) and privacy compliance through appropriate classification and protection controls.
- Develop and maintain repeatable processes for ongoing data discovery, classification, labelling, and control validation.
- Data Governance & Metadata Management
- Support governance processes for data ownership, stewardship, metadata quality, data protection, and policy compliance.
- Validate that sensitivity classifications, ownership, lineage, and metadata are consistently represented across governance platforms.
- Assist with data lineage, metadata, and data catalogue management activities.
- Partner with data stewards and business stakeholders to strengthen governance practices and resolve quality issues.
- Unity Catalog Administration & Access Governance
- Administer and support Databricks Unity Catalog security and governance capabilities.
- Advise, design, and implement scalable role-based access control models aligned with the principle of least privilege.
- Create, manage, and maintain Databricks account groups, roles, entitlements, and permission structures, using Microsoft Entra ID groups where appropriate.
- Implement granular access to catalogs, schemas, tables, views, functions, volumes, and governed data products.
- Partner with data owners, data stewards, Privacy, Security, and Platform Engineering to translate business access requirements into manageable access patterns.
- Support onboarding, access requests, periodic access reviews, entitlement recertification, privileged access monitoring, and offboarding.
- Monitor and audit permissions,



investigate access issues and permission conflicts, and manage approved governance exceptions.
- Develop standards, operating procedures, naming conventions, and reusable access patterns that reduce administrative effort and improve control.
- Support segregation of duties and avoid direct user grants where group-based authorization is more sustainable.
- Platform Security & Monitoring
- Monitor governance integrations and metadata synchronization across Databricks, OpenMetadata, and Microsoft Purview.
- Investigate and resolve issues involving data classification, sensitivity labels, lineage, metadata quality, and access controls.
- Support implementation and monitoring of governance policies and data protection controls.
- Participate in security reviews and governance assessments for new data products, analytics solutions, and AI use cases.
- Compliance & Risk Management
- Support compliance with applicable privacy, security, information management, and data governance standards.
- Monitor and report on data protection controls, access governance, and policy compliance.
- Identify, assess, document, and support mitigation of information protection and access risks.
- Maintain operational procedures, decisions, control records, audit evidence, and issue-resolution documentation.

Mandatory Requirements

- Experience in data governance, data security, information protection, privacy, identity and access management, or related discipline.
- Experience working with enterprise data platforms and contemporary cloud data environments.
- Knowledge of data classification, sensitivity labelling, information protection, and privacy-by-design practices.
- Experience implementing and administering data access controls using groups, roles, and data entitlements.
- Understanding of least privilege, segregation of duties, access reviews,



and auditable access governance.
- Experience with data catalogues, metadata management, lineage, or data governance tools.
- Strong analytical, troubleshooting, documentation, communication, and stakeholder engagement skills.

Technical Experience Demonstrated experience with several of the following:

- Databricks and Unity Catalog administration
- Microsoft Purview or OpenMetadata or comparable catalogue platforms
- Microsoft Entra ID / Active Directory groups
- Role-based access control and entitlement management
- Sensitivity labeling
- Data Loss Prevention

Azure data and analytics services
- SQL and data analysis tools
- Audit logging, control monitoring, and evidence management
- Data lineage and metadata management solutions

Preferred Qualifications

- Experience supporting Privacy Impact Assessments and privacy compliance activities.
- Knowledge of applicable privacy legislation and privacy-by-design principles.
- Hands-on experience implementing Unity Catalog security models and governance controls.
- Experience integrating Databricks identities and groups with Microsoft Entra ID.
- Familiarity with DAMA-DMBOK or comparable data governance practices.
- Experience designing scalable, least-privilege access frameworks for enterprise analytics platforms.

Affinity Earn Know someone who’s great for this, or any of our open roles? Earn up to $4,000/year for each successful referral through Affinity Earn. You can also earn up to $50,000 for helping us find new clients. Learn about our referral program at https://affinity-group.ca/earn/ or browse our jobs & follow us at https://www.linkedin.com/company/affinity-staffing/jobs/ About Affinity Affinity Group is a technology and business consulting and services company. We believe in creating long term relationships between clients and consultants that foster a mutually beneficial partnership. Affinity is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All employment is decided on the basis of qualifications, merit and business need.

For more information on Affinity, please visit www.affinity-group.ca

Job Number: 13855

📌 Data Security & Governance Analyst (Richmond)
🏢 Affinity
📍 Richmond