AI Data Protection - Associate Director

Are you ready to make an impact at DTCC? Work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development. At DTCC, we are at the forefront of innovation in the financial markets, committed to helping employees grow and succeed. We foster a thriving internal community and create a workplace that reflects the diversity of the world we serve.

About the Role

The Information Technology group delivers secure, reliable technology solutions that enable DTCC to be the trusted infrastructure of the global capital markets. The team delivers high-quality information through activities that include development of essential infrastructure capabilities, implementation of data standards, and governance.

As a member of the IT Cybersecurity & Platform Engineering team, the AI Data Security Engineer – Associate Director is a technical leader responsible for designing, building, and maintaining AI-focused data protection. This includes policies, rules, detection logic, classifiers, and tuning artifacts to prevent sensitive DTCC data from being exposed through GenAI tools, AI systems, and agentic workflows.

Responsibilities

• AI Channel DLP & Content Engineering
  • Configure AI proxy-type platforms from a data protection control perspective, including:
    • Prompt inspection rule logic to detect sensitive data in user prompts
    • Output inspection rules to detect sensitive data in model responses
    • Masking/redaction and enforcement actions for AI outputs
    • Rule versioning with change history and control evidence
  • Build and maintain the DLP rule estate for GenAI and AI agent channels, ensuring policies are enforceable and testable.
• Policy & Rule Design
  • For each AI control rule, define and document:
    • Sensitive data category and business/regulatory rationale
    • Detection approach (e.g., pattern/SIT detection, AI-native classifiers, contextual analysis)
    • Enforcement action (block, coach, redact, allow with logging)
    • False positive handling approach and tuning plan
  • Translate DTCC’s data protection strategy into actionable technical rules and policies.
• Signal Quality, Tuning & Operational Excellence
  • Continuously tune rules using telemetry and operational outcomes to reduce false positives and improve signal-to-noise.
  • Partner with Operations teams to close detection gaps and improve response quality through better policy precision.
• Alignment to Classification, Labels & Upstream Discovery
  • Ensure AI channel controls align to DTCC’s classification and labeling approach for consistent enforcement across channels.
  • Work with Data Protection stakeholders to leverage discovery/classification outputs to improve AI policy targeting and risk prioritization.
• Documentation, Testing & Control Evidence
  • Maintain clear documentation of AI policies and rule changes (intent, coverage, rationale, testing outcomes).
  • Support acceptance testing, change management, and evidence packages needed for audit and second-line review.

Note: The responsibilities of this role are not limited to the details above.

Qualifications

• Minimum 8 years of relevant experience
• Bachelor’s Degree and/or equivalent experience

Skills

• 5–8+ years of experience in data protection, DLP, and/or security control engineering
• Familiarity with security risks and controls related to AI and LLMs
• Financial Services or regulated industry experience
• Demonstrated hands-on experience building and tuning DLP policies/detection content in enterprise environments
• Experience configuring or engineering controls for Cloud and AI channels
• Strong understanding of data classification concepts
• Strong written documentation skills (policy rationale, change history, test evidence)

Pay and Benefits

• Competitive compensation, including base pay and annual incentive
• Comprehensive health and life insurance and well-being benefits, based on location
• Pension/Retirement benefits
• Paid Time Off and Personal/Family Care, and other leaves of absence to support physical, financial, and emotional well-being

Schedule

DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays, and a third day unique to each team or employee).