Data Masking & Test Data Management (TDM) SME

Data Masking & Test Data Management (TDM) SME

Posted 2 weeks ago by 1752647611

Negotiable
Outside
Remote
USA

Summary: We are looking for a Data Masking & Test Data Management (TDM) Subject Matter Expert (SME) to lead initiatives for secure handling of sensitive data across various enterprise environments. The role involves overseeing architecture, governance, vendor evaluation, and implementation of data masking and TDM solutions. The SME will also be responsible for data discovery and classification efforts, ensuring compliance with regulations, and driving automation in non-production data environments.

Key Responsibilities:

  • Develop and lead the enterprise-wide data masking and TDM strategy across Oracle and non-Oracle databases in on-premises and cloud environments.
  • Design scalable, reusable, and automated frameworks that enable secure test data provisioning and masking aligned with DevOps pipelines and agile delivery.
  • Conduct in-depth vendor assessments (in association with other architects) to evaluate commercial and open-source masking/TDM tools.
  • Lead build vs. buy analysis, including cost-benefit evaluation, ROI, scalability, and strategic fit.
  • Coordinate vendor PoCs, performance benchmarking, and alignment with enterprise architecture and InfoSec policies.
  • Perform discovery and classification of sensitive data elements (PII, PCI, HIPAA, FERPA) across structured and semi-structured sources.
  • Define and enforce enterprise policies for data masking, retention, access, and auditability in prod & non-prod environments.
  • Integrate classification tools with enterprise data catalogs (Collabra, Databricks Unity, AWS Glue, etc.) and governance frameworks.
  • Guide pilot implementations and refine solutions based on stakeholder feedback and business requirements.
  • Oversee the enterprise rollout of data masking and TDM solutions across development, testing, and analytics environments.
  • Drive automation by embedding masking and TDM into CI/CD, infrastructure-as-code, and QA frameworks.
  • Prepare documentation and controls for internal and external audits.
  • Ensure compliance with privacy regulations (e.g., GDPR, HIPAA, CCPA, FERPA, PCI-DSS) through masking and test data management practices.
  • Implement monitoring, access controls, and lineage tracking for sensitive data use in non-production systems.
  • Implement and configure tools such as Oracle Data Masking Pack, Informatica TDM, Delphix, AWS Macie, Amazon DataZone, or custom in-house solutions.
  • Collaborate with security and platform teams to integrate solutions into hybrid environments and cloud-native ecosystems.
  • Work with stakeholders across DBAs, QA, DevOps, Security, Compliance, and Application teams to ensure enterprise alignment.
  • Collaborate with cross-functional teams QA, Solution Architecture, Salesforce, & Engineering.
  • Provide technical leadership, documentation, training, and operational support to embed TDM and data privacy into organizational practices.

Key Skills:

  • 8+ years of experience in data masking, TDM, data security, or data governance roles.
  • Deep expertise in Oracle and non-Oracle platforms such as Aurora, RDS, PostgreSQL, MySQL, SQL Server, etc.
  • Strong background in sensitive data discovery, classification, and protection strategies.
  • Proven ability to conduct vendor assessments and build vs. buy evaluations.
  • Hands-on experience with CI/CD, test automation, and integrating data masking in DevOps environments.
  • Knowledge of regulatory compliance requirements (HIPAA, FERPA, PCI-DSS, GDPR, CCPA).
  • Excellent communication, technical documentation, and stakeholder engagement skills.

Salary (Rate): undetermined

City: undetermined

Country: USA

Working Arrangements: remote

IR35 Status: outside IR35

Seniority Level: undetermined

Industry: Other

Detailed Description From Employer:

Job Title: Data Masking & Test Data Management (TDM) SME

Location: Remote

Duration: 12+ Months

Job Description

Overview:

We are seeking seasoned Data Masking & Test Data Management (TDM) Subject Matter Expert (SME) to lead strategic initiatives around the secure handling of sensitive data across enterprise environments. This role will own the architecture, governance, vendor evaluation, and enterprise implementation of data masking and TDM solutions across Oracle and non-Oracle platforms (e.g., Aurora, RDS, PostgreSQL, MySQL, SQL Server). The SME will also drive data discovery and classification efforts for PII, PCI, HIPAA, and FERPA data elements, and lead build vs. buy assessments to ensure scalable, compliant, and automated solutions for non-production data environments.

Key Responsibilities:

Architecture & Strategy

  • Develop and lead the enterprise-wide data masking and TDM strategy across Oracle and non-Oracle databases in on-premises and cloud environments.
  • Design scalable, reusable, and automated frameworks that enable secure test data provisioning and masking aligned with DevOps pipelines and agile delivery.

Vendor Solution Evaluation & Build vs. Buy Assessment

  • Conduct in-depth vendor assessments (in association with other architects) to evaluate commercial and open-source masking/TDM tools.
  • Lead build vs. buy analysis, including cost-benefit evaluation, ROI, scalability, and strategic fit.
  • Coordinate vendor PoCs, performance benchmarking, and alignment with enterprise architecture and InfoSec policies.

Sensitive Data Discovery, Classification & Governance

  • Perform discovery and classification of sensitive data elements (PII, PCI, HIPAA, FERPA) across structured and semi-structured sources.
  • Define and enforce enterprise policies for data masking, retention, access, and auditability in prod & non-prod environments.
  • Integrate classification tools with enterprise data catalogs (Collabra, Databricks Unity, AWS Glue, etc.) and governance frameworks.

Implementation, Rollout & Automation

  • Guide pilot implementations and refine solutions based on stakeholder feedback and business requirements.
  • Oversee the enterprise rollout of data masking and TDM solutions across development, testing, and analytics environments.
  • Drive automation by embedding masking and TDM into CI/CD, infrastructure-as-code, and QA frameworks.

Audit Readiness & Regulatory Compliance

  • Prepare documentation and controls for internal and external audits.
  • Ensure compliance with privacy regulations (e.g., GDPR, HIPAA, CCPA, FERPA, PCI-DSS) through masking and test data management practices.
  • Implement monitoring, access controls, and lineage tracking for sensitive data use in non-production systems.

Tooling & Integration

  • Implement and configure tools such as Oracle Data Masking Pack, Informatica TDM, Delphix, AWS Macie, Amazon DataZone, or custom in-house solutions.
  • Collaborate with security and platform teams to integrate solutions into hybrid environments and cloud-native ecosystems.

Cross-Functional Collaboration & Enablement

  • Work with stakeholders across DBAs, QA, DevOps, Security, Compliance, and Application teams to ensure enterprise alignment.
  • Collaborate with cross-functional teams QA, Solution Architecture, Salesforce, & Engineering.
  • Provide technical leadership, documentation, training, and operational support to embed TDM and data privacy into organizational practices.

Required Qualifications:

  • 8+ years of experience in data masking, TDM, data security, or data governance roles.
  • Deep expertise in Oracle and non-Oracle platforms such as Aurora, RDS, PostgreSQL, MySQL, SQL Server, etc.
  • Strong background in sensitive data discovery, classification, and protection strategies.
  • Proven ability to conduct vendor assessments and build vs. buy evaluations.
  • Hands-on experience with CI/CD, test automation, and integrating data masking in DevOps environments.
  • Knowledge of regulatory compliance requirements (HIPAA, FERPA, PCI-DSS, GDPR, CCPA).
  • Excellent communication, technical documentation, and stakeholder engagement skills.

Preferred Qualifications:

  • Experience with AWS-native tools (e.g., Macie, Lake Formation, DataZone, Glue Catalog).
  • Experience with data masking in Oracle and Non-Oracle databases.
  • Experience with Databricks Unity Catalog
  • Certifications:
    • Oracle Database Security Administration (1Z0-116)
    • ILM Test Data Management - Specialist Certification
    • ISO 27001 - Information Security Management System (ISMS)
    • Certified in Data Protection (CDP) Identity Management Institute
    • Delphix Masking Services - Data Masking Architect
  • Industry experience in higher education, healthcare, or financial services domains.