Data Security & Privacy Contractor

Overview

Implement and manage data security/privacy platform, embedding privacy in dev lifecycle.

Key Responsibilities

• data classification
• ci/cd
• encryption management
• policy enforcement
• reporting
• platform administration

Tasks

We are seeking a hands-on Data Security & Privacy Contractor to embed privacy and security into our development lifecycle. This role will act as the administrator of our data security/privacy platform, connecting it into engineering environments, driving data classification, data flow and lineage and partnering with teams to secure data flows. The focus is on enabling a shift-left model where data governance and protection become part of how products are designed, built, and released. -Define guardrails for handling PII and sensitive data with engineering leadership. -Integrate data security checks early in the SDLC and CI/CD pipelines. -Identify and fix risky data practices before release. -Analyze scan results, triage anomalies/false positives, and collaborate with developers on remediation. -Work with engineering and DevOps to ensure encryption and access control at every stage of the lifecycle. -Collaborate with AppSec/Product Security on secure coding practices related to data handling. -Develop and enforce policies for data retention, archival, and secure deletion. -Work with Cloud/Infra Security teams on encryption, key management, and access controls. -Administer and configure the data security/privacy platform. -Champion a “privacy by design / security by design” approach in product development. -Provide reporting on classification coverage, remediation progress, and risk trends. -Minimize storage of sensitive data in non-production systems, logs, and backups. -Integrate the platform into source code repositories, CI/CD pipelines, and engineering systems. -Partner with engineering to map data flows (customer, employee, PII, sensitive data). -Support compliance efforts (ISO, SOC 2, NIST PMF) by ensuring accurate data governance evidence. -Package outputs into product-level deliverables for data security posture. -Ensure outputs are actionable and embedded into day-to-day dev workflows. -Build and maintain data classification models within the platform. -Establish processes for monitoring data movement across environments (dev, test, prod, cloud). -Validate classifications with engineering teams and incorporate into design reviews.

Requirements

• ci/cd
• data classification
• encryption
• iso 27001
• shift-left
• 5+ years

What You Bring

Shift-Left Data Security Data Flow Understanding & Classification -Hands-on experience with data classification/privacy platforms integrated into engineering workflows. -Strong technical background with source code repositories, CI/CD pipelines, and scanning tools. -Excellent communication skills to align engineering and compliance stakeholders. -5+ years in data security, privacy engineering, or product security roles. -Deep knowledge of data security practices: classification, encryption, access control, minimization, retention, deletion. -Familiarity with compliance frameworks (ISO 27001, SOC 2, NIST Privacy Framework) as context, not focus. -Experience embedding privacy/security into SDLC (“shift-left”).

People Also Searched For

About Peoplelogic

-Founded with the vision to optimize workforce management, PeopleLogic blends data science with HR expertise. -It offers cutting-edge solutions aimed at improving talent management, workforce efficiency, and employee engagement. -PeopleLogic specializes in helping companies make data-driven decisions to align their workforce with business objectives. -The company has worked on numerous projects, from developing advanced analytics tools to providing tailored talent management solutions. -They focus on industries including technology and human resources, ensuring seamless integration of tech-driven workforce solutions.

Sector Specialisms