Senior Data Security Engineer (f/m/d)

Awin is a company established in 2000, part of the Axel Springer group, operating in a complex hybrid environment spanning AWS, Azure, and third-party SaaS platforms. The company focuses on data security as a mission-critical aspect of its operations.

• Demonstrable experience in a dedicated, senior data security role.
• Proven track record of implementing data classification frameworks in complex, multi-cloud or hybrid environments.
• Hands-on experience leading DLP programme implementation and ongoing management.
• Experience working with data engineering, data architecture, or data governance teams.
• Exposure to AI governance, DSPM, or shadow AI detection (desirable).
• Exposure to security architecture processes including architecture reviews and reference architecture development (desirable).
• Knowledge of data classification framework design, DLP policy architecture and tuning across endpoint, network, and cloud channels.
• Experience with cloud data environments such as AWS S3, Azure data services, and M365 data flows.
• Understanding of CASB concepts and tooling and their interaction with DLP capabilities.
• Knowledge of GDPR and data protection obligations and their translation into technical controls.
• Understanding of AI service data handling models including Microsoft Copilot, ChatGPT, and third-party AI services.
• Broad awareness of data governance frameworks including data cataloguing, lineage, access governance, and data quality.
• Ability to operate autonomously and engage credibly with senior technical stakeholders.
• Clear communication skills in English for both technical and non-technical audiences.
• Comfortable working with ambiguity and incomplete information.

• Architect and implement Awin's data security framework in partnership with the Security Architect, including classification taxonomy, sensitivity tiers, and data handling standards.
• Support the implementation of Awin's data classification programme, including labelling policies and classification coverage.
• Own the implementation of DLP policies to prevent sensitive data breaches, define policy architecture, alert thresholds, enforcement logic, and maintain audit-ready records.
• Operationalise data security posture management tooling to control sensitive data flows to AI tools and third-party services, ensuring enforceable AI governance controls.
• Act as the data security domain expert for the Security Architecture function, providing input into architecture reviews, product designs, and technology assessments.
• Engage with stakeholders to understand sensitive data flows and ensure integration of data security requirements with the broader data governance framework.