Data Protection Tokenization Specialist, AVP

Deutsche Bank; Madrid; Hybrid; EUR 90,000 - 120,000; Full time

Job summary

DWS Group in Madrid is seeking a Data Protection Tokenization Specialist to lead data protection and tokenization capabilities across AI solutions. The role reports into the AI Security CoE and focuses on secure data handling within GenAI and AI-driven workflows.

As part of the AI Security Team, you will shape data protection controls, work with AI architects, and help scale a forward-looking AI Security capability in a hybrid work environment.

Qualifications

• 7+ years of data security, data protection, privacy engineering, cloud security, or security architecture experience.
• Hands-on experience with tokenization, pseudonymization, masking, encryption, DLP, data classification, and secure data handling.
• Experience with data exposure risks across AI services and cloud platforms.

Responsibilities

• Design and implement tokenization, pseudonymization, anonymization, masking, and encryption patterns.
• Define data protection controls for prompts, responses, RAG, and AI data flows.
• Integrate DLP, data classification, and secure logging into AI solutions.
• Partner with AI architects and engineers on secure data-handling patterns.
• Assess data exposure risks for internal and third-party AI services.

Skills

Tokenization

Pseudonymization

Masking

Encryption

DLP

Data classification

Secure data handling

AI/ML

GenAI data flows

Job description

Job Description:

Employer: DWS Group

Title: Data Protection Tokenization Specialist, AVP

Location: Madrid

About DWS:

Today, markets face a whole new set of pressures - but also a whole lot of opportunity too. Opportunity to innovate differently. Opportunity to invest responsibly. And opportunity to make change.

Join us at DWS, and you can be part of an industry-leading firm with a global presence. You can lead ambitious opportunities and shape the future of investing. You can support our clients, local communities, and the environment.

We're looking for creative thinkers and innovators to join us as the world continues to transform. As whole markets change, one thing remains clear; our people always work together to capture the opportunities of tomorrow.

As investors on behalf of our clients, it is our role to find investment solutions. Ensuring the best possible foundation for our clients' financial future. And in return, we'll give you the support and platform to develop new skills, make an impact and work alongside some of the industry's greatest thought leaders. This is your chance to achieve your goals and lead an extraordinary career.

This is your chance to invest in your future.

Read more about DWS and who we are here.

Team / division overview

DWS is transforming its Technology function and growing its internal capabilities. As AI and other emerging technologies continue to reshape the business and threat landscape, we are building a focused AI Security capability that brings together the right mix of cybersecurity, engineering, architecture, data protection, offensive security, and risk expertise. These roles will help grow and evolve our security function so we can securely enable innovation while identifying and managing new and rapidly developing risks. You will be a key member of this team, and an important part of our journey to build a scalable, forward-looking AI Security capability.

The candidate for this role reports into the DWS CSO AI Security CoE Lead and will be a key member of the AI Security Team. The Data Protection / Tokenization Specialist is responsible for developing and implementing data protection and tokenization capabilities that enable secure use of sensitive data across AI solutions.

Your responsibilities

• Design and implement tokenization, pseudonymization, anonymization, masking, and encryption patterns.
• Define data protection controls for prompts, responses, RAG, and AI data flows.
• Integrate DLP, data classification, and secure logging into AI solutions.
• Partner with AI architects and engineers on secure data-handling patterns.
• Assess data exposure risks associated with internal and third-party AI services.

We are looking for

• 7+ years of data security, data protection, privacy engineering, cloud security, or security architecture experience, with recent exposure to AI/ML and GenAI data flows.
• Strong hands-on experience with tokenization, pseudonymization, masking, encryption, DLP, data classification, and secure data handling.
• Experience identifying and remediating data vulnerabilities across applications and cloud platforms, extended to prompts/responses, RAG, model access, agent data flows, and AI-driven data exfiltration risks.
• Practical understanding of how established data protection controls must evolve for frontier AI use cases.
• Proven ability to leverage AI tools to enhance productivity, optimise workflows to solve business problems, while applying critical judgment to ensure responsible and ethical use of data and AI outputs.

What we'll offer you:

At DWS we're serious about diversity, equity and creating an inclusive culture where colleagues can be themselves and it's important to us that you enjoy coming to work - feeling healthy, happy and rewarded. At DWS, you'll have access to a range of benefits which you can choose from to create a personalised plan unique to your lifestyle. Whether you're interested in healthcare, company perks, or are thinking about your retirement plan, there's something for everyone.

DWS' Hybrid Working model is designed to find the right balance between in-person collaboration and engagement in the office, which is core to our working culture, and working from home. Each business group varies on the split between time spent in the office and at home, but this will be discussed and made clear as part of your application and interview process. We will continue to review and evolve our working environments and methods to ensure that we are working in the best way possible for our people.

If you require any adjustments or changes to be made to the interview process for any reason including, or related to a disability or long-term health condition, then please contact your recruiter and let them know what assistance you may need. Examples of adjustments include providing a change to the format of the interview, or prov