Data Governance Technical Lead
About the role
This role bridges governance policy with technical implementation. The Data Governance Technical Lead designs, prototypes, and implements secure data infrastructure (especially on GCP), ensuring data ingress, egress, and access controls are governed and auditable. This person turns governance rules into enforceable cloud architecture.
Key responsibilities
Define and document data ingress controls, data egress controls, and data perimeter design
Prototype governance tools including DLP scanning, data masking, tokenization, VPC Service Controls, IAM policy models, CLS (Policy Tags), and RLS
Design secure data flow architecture
Evaluate third-party governance tools (PIM, DLP, catalog, IAM)
Build audit dashboards and detect abnormal behavior (mass query, suspicious export attempts)
Automate alerting
Create automated policy enforcement scripts
Implement tag-based masking and access approval workflow integration
Support integration with SAP, Kissflow, GCP, e-commerce data feeds, and other operation systems
About you
4+ years in Cloud engineering or Data engineering or Security engineering
Strong knowledge of GCP (BigQuery, IAM, VPC, Audit Logs)
Strong knowledge of data warehouse security concepts
Strong knowledge of RBAC / ABAC
Strong knowledge of data ingress/egress design
Ability to design architecture diagrams
Hands-on POC capability
Understanding of data exfiltration risks, data masking strategies, cloud perimeter security, and audit logging frameworks
Basic scripting (Python / SQL / Terraform preferred)
Experience with PDPA / GDPR compliance controls, data loss prevention (DLP), SIEM integration, and zero-trust architecture