AI Data Protection - Associate Director

Are you ready to make an impact at DTCC? Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We are committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve. The Information Technology group delivers secure, reliable technology solutions that enable DTCC to be the trusted infrastructure of the global capital markets. The team delivers high-quality information through activities that include development of essential, building infrastructure capabilities to meet client needs and implementing data standards and governance. Pay and Benefits: Competitive compensation, including base pay and annual incentive Comprehensive health and life insurance and well-being benefits, based on location Pension / Retirement benefits Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being. DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee). The Impact you will have in this role: Being a member of IT Cybersecurity & Platform Engineering team, the AI Data Security Engineer – Assocaite Director is a technical leader, responsible for designing, building, and maintaining AI‑focused data protection. This will include policies, rules, detection logic, classifiers, and tuning artifacts—that prevent sensitive DTCC data from being exposed through GenAI tools, AI systems and agentic workflows. This role combines technical expertise, cross-functional leadership and program execution to ensure governance of AI data protection controls across AI proxy‑type platforms and AI channels, authoring prompt inspection and output inspection rules, defining enforcement actions, and maintaining the AI DLP rule estate with change history and disciplined lifecycle management. Your Primary Responsibilities: AI Channel DLP & Content Engineering Configure AI proxy‑type platforms from a data protection control perspective, including: Prompt inspection rule logic to detect sensitive data in user prompts Output inspection rules to detect sensitive data in model responses Masking/redaction and enforcement actions for AI outputs Rule versioning with change history and control evidence Build and maintain the DLP rule estate for GenAI and AI agent channels, ensuring policies are enforceable and testable. Policy & Rule Design For each AI control rule, define and document: Sensitive data category and business/regulatory rationale Detection approach (e.g., pattern/SIT detection, AI‑native classifiers, contextual analysis) Enforcement action (block, coach, redact, allow with logging) False positive handling approach and tuning plan Translate DTCC’s data protection strategy into actionable technical rules and policies. Signal Quality, Tuning & Operational Excellence Continuously tune rules using telemetry and operational outcomes to reduce false positives and improve signal‑to‑noise Partner with Operations teams to close detection gaps and improve response quality through better policy precision. Alignment to Classification, Labels & Upstream Discovery Ensure AI channel controls align to DTCC’s classification and labeling approach (so enforcement is consistent across channels). Work with Data Protection stakeholders to leverage discovery/classification outputs to improve AI policy targeting and risk prioritization. Documentation, Testing & Control Evidence Maintain clear documentation of AI policies and rule changes (intent, coverage, rationale, testing outcomes). Support acceptance testing, change management, and evidence packages needed for audit and second‑line review. NOTE: The Primary Responsibilities of this role are not limited to the details above.* Qualifications: Min 8 years of relevant experience Bachelor’s Degree and/or equivalent experience Talents Needed for Success: 5–8+ years of experience in data protection, DLP, and/or security control engineering. Familiarity with security risks and controls related to AI and LLMs Financial Services or regulated industry experience Demonstrated hands‑on experience building and tuning DLP policies / detection content in enterprise environments. Experience configuring or engineering controls for Cloud and AI channels Strong understanding of data classification concepts Strong written documentation skills (policy rationale, change history, test evidence). The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.