Data Protection Tokenization Specialist, AVP

About the role

DWS Group is building a focused AI Security capability combining cybersecurity, engineering, architecture, data protection, offensive security and risk expertise. The Data Protection Tokenization Specialist, AVP reports to the DWS CSO AI Security CoE Lead and is a key member of the AI Security Team. The role develops and implements data protection and tokenization capabilities that enable the secure use of sensitive data across AI solutions.

Key responsibilities

• Design and implement tokenization, pseudonymization, anonymization, masking and encryption patterns.
• Define data protection controls for prompts, responses, RAG and AI data flows.
• Integrate DLP, data classification and secure logging into AI solutions.
• Partner with AI architects and engineers on secure data-handling patterns.
• Assess data exposure risks of internal and third-party AI services.

Required profile

• 7+ years of experience in data security, data protection, privacy engineering, cloud security or security architecture, with recent exposure to AI/ML and GenAI data flows.
• Experience identifying and remediating data vulnerabilities across applications and cloud platforms, including prompts/responses, RAG, model access, agent data flows and AI-driven data exfiltration risks.
• Proven ability to use AI tools to improve productivity and workflow, with critical judgment for responsible and ethical use of data and AI outputs.

Required skills

• Hands-on experience with tokenization, pseudonymization, masking, encryption, DLP, data classification and secure data handling.
• Practical understanding of how data protection controls must evolve for frontier AI use cases.

What we offer

• A range of benefits that can be chosen to fit a personal lifestyle, such as healthcare, company perks and a retirement plan.
• A hybrid working model balancing office collaboration and working from home, with the split discussed during the application and interview process.