Data Anonymisation & Test Data Management Architect

The organisation is preparing a procurement and market consultation process planned for early 2027. The assignment is to define functional and technical requirements for future procurement, solution selection and a sustainable Test Data Management and data anonymisation strategy. The consultant will analyse data flows and non-production data use, develop data protection and test-data approaches, and bridge business requirements and technical implementation. What we're looking for - Minimum 5 years of proven experience as a Security Consultant. - Minimum 7 years of experience in data architecture, data governance, data management or data engineering. - Proven experience analysing and documenting security processes and governance. - Proven experience analysing end-to-end data flows across multiple applications, databases and interfaces, demonstrated through at least 2 comparable assignments. - Proven experience with data masking, anonymisation, pseudonymisation or synthetic data, demonstrated through at least 1 relevant project. - Proven experience translating testing objectives and business scenarios into concrete test-data requirements. - Proven experience defining functional and technical requirements for a tender, RFP or tool-selection process. - Proven experience facilitating workshops with business, IT, architecture, security and external stakeholders. - Strong ability to structure complex environments and identify missing information. - Ability to work autonomously and deliver end-to-end results. - Strong multi-level stakeholder-management skills. - Fluent English. - Fluent French or Dutch, with passive knowledge of the other national language. Nice-to-have - Master’s degree in Science, Law, IT or a related field. - Experience with security-management frameworks such as ISO 2700x, COBIT, NIST and OWASP. Additional details The consultant will work with business, data governance, privacy, security, architecture, IT operations, application management, testing and QA teams, internal business partners, and external service providers and vendors. Responsibilities include organising and facilitating workshops and interviews, gathering and challenging requirements, identifying gaps and dependencies, building consensus, and presenting findings to technical and non-technical audiences. Deliverables include a current-state assessment; end-to-end data-flow documentation; identification of sensitive-data usage and associated risks; target Test Data Management, anonymisation and pseudonymisation strategies; a synthetic-data approach; functional and technical requirements; governance and operational recommendations; input for procurement specifications and future market consultation; and recommendations for tooling and solution-selection criteria.