Data & Security Expert

For a client in Brussels we are looking for a Data & Security Expert.

Start ASAP, duration: to be agreed, extension possible

Data modelling and implementation

Define the conceptual, logical and implementable data model.
Identify source data, transformations, business rules, derived attributes, identity-linking requirements, historical needs and refresh expectations.
Build, configure or guide the hands-on implementation aggregate and associated curated data products.
Write and review SQL and transformation logic, validate results against source data and establish reproducible test cases.
Define data-quality rules, reconciliation checks, exception handling, lineage and monitoring.
Evaluate suitable implementation options with architecture and engineering teams. Keep the design technology-neutral until Athena, Redshift or another platform is formally selected.
Ensure the model can evolve for new use cases and data sources without uncontrolled duplication or overengineering.

Create and maintain a consumer-access matrix covering consumer, business purpose, permitted data, granularity, classification, environment, approval owner, retention conditions and technical enforcement.
Define consumer categories, including application components, campaign or marketing processes, analysts, reporting solutions, recommendation services and authorised operational support roles.
Apply least privilege, purpose limitation, data minimisation, segregation of duties and need-to-know principles.
Determine when aggregation, masking, pseudonymisation, restricted views or other protective measures are required.
Identify and assess risks created by combining customer profile, transaction, engagement, behavioural and health-related information.
Define requirements for authentication, authorisation, encryption, audit logging, monitoring, access review and access revocation.
Ensure that guidance and personalised-content use cases are clearly separated from commercial activation where their purposes, data or access conditions differ.
Challenge unclear or excessive access requests and guide stakeholders toward a secure, workable alternative.
Coordinate security and privacy reviews and document decisions, conditions, residual risks and accountable approvers.

Drive workshops and decisions with Sales & Marketing, domain stakeholders, Enterprise representatives, data owners, architecture, Security and Privacy.
Maintain a prioritised backlog with dependencies, owners, decisions, risks, blockers and acceptance criteria.
Escalate blockers early and propose concrete options with trade-offs and a recommended path.
Support testing, business validation, release readiness, documentation, knowledge transfer and operational handover.
Establish reusable patterns for onboarding new data, adding new attributes and authorising new consumers.

Advanced SQL and hands-on experience with ETL/ELT, data transformation, analytical modelling and data-quality validation.
Experience with dimensional and entity-oriented modelling, metadata, lineage and historical data patterns.
Experience integrating data from multiple business domains into a coherent customer view.
Ability to assess platform options based on security, performance, scalability, cost, operability and integration requirements.
Experience with one or more common analytical technologies such as Athena, Redshift, Snowflake, Databricks, Synapse or comparable platforms. No specific technology is mandatory at this stage.
Experience with BI, recommendation, campaign or content-personalisation consumers is an asset.

Deep knowledge of analytical-data access control, least privilege, RBAC/ABAC patterns, purpose-based access and segregation of duties.
Experience with data classification, data minimisation, masking or pseudonymisation, retention, secure sharing and access reviews.
Ability to turn policies and business purposes into enforceable permissions at dataset, view, row, column or attribute level, depending on the selected technology.
Knowledge of encryption, identity and access management, audit logging, security monitoring and incident traceability.
Experience assessing aggregation, inference, misuse, secondary-use, re-identification and excessive-access risks.
Ability to work effectively with Security, Privacy, Legal, architecture, data owners and business stakeholders.