AI Data Protection - Associate Director
About The Position
The Information Technology group delivers secure, reliable technology solutions that enable DTCC to be the trusted infrastructure of the global capital markets. The team delivers high-quality information through activities that include development of essential, building infrastructure capabilities to meet client needs and implementing data standards and governance. Being a member of IT Cybersecurity & Platform Engineering team, the AI Data Security Engineer – Assocaite Director is a technical leader, responsible for designing, building, and maintaining AI‑focused data protection. This will include policies, rules, detection logic, classifiers, and tuning artifacts—that prevent sensitive DTCC data from being exposed through GenAI tools, AI systems and agentic workflows. This role combines technical expertise, cross-functional leadership and program execution to ensure governance of AI data protection controls across AI proxy‑type platforms and AI channels, authoring prompt inspection and output inspection rules, defining enforcement actions, and maintaining the AI DLP rule estate with change history and disciplined lifecycle management.
Requirements
- Min 8 years of relevant experience
- Bachelor’s Degree and/or equivalent experience
- 5–8+ years of experience in data protection, DLP, and/or security control engineering.
- Familiarity with security risks and controls related to AI and LLMs
- Financial Services or regulated industry experience
- Demonstrated hands‑on experience building and tuning DLP policies / detection content in enterprise environments.
- Experience configuring or engineering controls for Cloud and AI channels
- Strong understanding of data classification concepts
- Strong written documentation skills (policy rationale, change history, test evidence).
Responsibilities
- Configure AI proxy‑type platforms from a data protection control perspective, including: Prompt inspection rule logic to detect sensitive data in user prompts, Output inspection rules to detect sensitive data in model responses, Masking/redaction and enforcement actions for AI outputs, Rule versioning with change history and control evidence.
- Build and maintain the DLP rule estate for GenAI and AI agent channels, ensuring policies are enforceable and testable.
- For each AI control rule, define and document: Sensitive data category and business/regulatory rationale, Detection approach (e.g., pattern/SIT detection, AI‑native classifiers, contextual analysis), Enforcement action (block, coach, redact, allow with logging), False positive handling approach and tuning plan.
- Translate DTCC’s data protection strategy into actionable technical rules and policies.
- Continuously tune rules using telemetry and operational outcomes to reduce false positives and improve signal‑to‑noise.
- Partner with Operations teams to close detection gaps and improve response quality through better policy precision.
- Ensure AI channel controls align to DTCC’s classification and labeling approach (so enforcement is consistent across channels).
- Work with Data Protection stakeholders to leverage discovery/classification outputs to improve AI policy targeting and risk prioritization.
- Maintain clear documentation of AI policies and rule changes (intent, coverage, rationale, testing outcomes).
- Support acceptance testing, change management, and evidence packages needed for audit and second‑line review.
Benefits
- Competitive compensation, including base pay and annual incentive
- Comprehensive health and life insurance and well-being benefits, based on location
- Pension / Retirement benefits
- Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
