Get a reply from this employer
Your resume and cover letter, tailored to exactly what they’re hiring for.
CI&T is seeking a Security & Privacy Governance Lead in Brazil to own sensitive-data classification, masking, and governance for a large-scale finance data platform modernization. Collaborate with Principal Data Architect and client stakeholders to gate the build through governance design and policy implementation.
You will shape classification, masking, and access-tiering rules in the platform, define governance for key metrics, and coordinate with Security, Privacy, and Compliance teams to
At CI&T, we help large enterprises transform the potential of AI into real business impact with AI Deployment, AI-native execution, and tech-integrated business solutions.
With 30 years of experience in technological transformation, we accelerate innovation with expertise in Agentic SDLC, Application modernization, Data & AI, Martech and Business strategy.
We are 8,000 CI&Ters across more than 25 countries, collaborating to build solutions with real impact. AI is already part of how we work, evolve, and innovate every day.
At CI&T, our rapid growth is fueled by the innovative solutions we create for our global clients. We are seeking a Security & Privacy Governance Lead to own sensitive‑data classification, masking, and governance design for a large‑scale Finance data platform modernization at a major US mortgage lender, working alongside the Principal Data Architect to turn the target architecture's governance requirements into implemented policy. This role leads the classification and masking design work during the program's design‑validation phase, because that work gates everything the development team builds afterward.
This position combines hands‑on policy implementation with cross‑functional coordination: the professional designs classification, masking, and access‑tiering rules directly in the platform, defines how standardized business metrics are governed across the data estate, and partners with client security and compliance stakeholders to secure sign‑off before build begins.
Lead sensitive‑data classification across the source system's tables and dimension values, producing accurate, defensible classification output.
Design dynamic data masking policies and row‑access policies on sensitive financial fields (general ledger and payroll‑adjacent), scoped by role and business unit.
Define the raw‑vs‑curated access tiering and least‑privilege access model across the data platform.
Design column‑level lineage from source through landing, staging, conformed, and curated layers, the semantic model, and into consuming reports — auditable end to end.
Support master data management (MDM) efforts to ensure standardized, consistent definitions of key business metrics (such as billing and financial figures) across the platform.
Deliver governance artifacts platform‑neutrally: policy objects/tags implemented directly in the platform, plus versioned, documented classification and lineage artifacts in client‑controlled repositories.
Partner with client Security, Privacy, and Compliance teams to secure design approval ahead of build, and resolve open questions on network/identity boundary decisions that touch sensitive data.
Support downstream integration of classification and lineage artifacts into the client's own enterprise catalog/governance tooling, without building or operating that tooling directly.
Solid experience in data security/privacy governance roles on enterprise data platforms, including hands‑on policy implementation, not policy‑writing alone.
Hands‑on experience implementing data classification, dynamic masking, and row‑access/row‑level security on Snowflake.
Experience designing or contributing to column‑level lineage across multi‑layer data pipelines.
Working knowledge of data privacy and access‑governance practice with data in financial/accounting, FP&A or Mortgage environments.
Comfortable leading the classification and masking design during a design‑validation phase, where your output directly gates the rest of the build.
Fluent English (C1) — direct engagement with client Security, Privacy, and Compliance stakeholders and gate reviews.
Experience with Microsoft Fabric/OneLake governance boundaries alongside Snowflake.
Familiarity with constraining AI-assisted development tools to metadata/aggregate access only, never raw sensitive values.
#LI-JP3
More details about our benefits here: https://ciandt.com/br/pt-br/carreiras
At CI&T inclusion starts at the first contact. If you are a person with a disability, it is important to present your assessment during the selection process. See which data needs to be included in the report by clicking here. This way, we can ensure the support and accommodations that you deserve. If you do not yet have the assessment, don't worry: we can support you in obtaining it.
We have a dedicated Health and Well‑being team, inclusion specialists, and affinity groups who will be with you at every stage. Count on us to make this journey side by side.