Purpose of position
At Awin, data is central to everything we do, and protecting it is mission‑critical. As a Senior Data Security Engineer (f/m/d) you will be responsible for building and operating Awin’s data security capability as a dedicated discipline. In this senior, implementation-led role, you will lead the implementation of Awin's data loss prevention controls and data security posture management across a complex hybrid environment spanning AWS, Azure, and third‑party SaaS platforms.
In this position, you will own data security tooling and controls within the Information Security function, working in close partnership with the Security Architect to engineer solutions that align with Awin frameworks and reference architectures, while engaging directly with technical and data governance teams to ensure that security requirements integrate coherently with the broader data strategy.
Key Tasks
- Architect and implement Awin's data security framework in partnership with the Security Architect. Build and operationalise the classification taxonomy, sensitivity tiers, and data handling standards that will underpin all downstream DLP, DSPM, and AI governance controls.
- Support the implementation of Awin's data classification programme —labelling policies, and classification coverage across all data environment where sensitive data is processed or stored.
- Own the implementation of DLP policies that prevent sensitive data from being shared, exported, or transmitted in breach of Awin's confidentiality risk appetite. Define policy architecture, alert thresholds, and enforcement logic. Work with Internal IT on deployment and tuning, and maintain audit-ready records of DLP events and enforcement actions.
- Operationalise data security posture management tooling to provide visibility and control over how sensitive data flows to AI tools and third-party services. Ensure that AI data governance controls are technically enforceable, supporting Awin's AI risk appetite statements and the requirements of the AI governance framework.
- Act as the data security domain expert for the Security Architecture function. Work closely with the Security Architect to provide specialist input into architecture reviews, product designs, and technology assessments where data security considerations are material.
- Engage directly with stakeholders to understand how sensitive data flows across the organisation, and to ensure that data security requirements integrate coherently with the broader data governance framework.
Skills & Expertise
- Demonstrable experience in a dedicated, senior data security role
- Proven track record of implementing data classification frameworks in complex, multi-cloud or hybrid environments
- Hands-on experience leading DLP programme and implementation and ongoing management
- Experience engaging with data engineering, data architecture, or data governance teams — able to work credibly alongside experienced data professionals on shared problems.
- Exposure to AI governance, DSPM, or shadow AI detection is desirable — the right candidate will develop and lead this capability in the role
- Exposure to security architecture processes — architecture reviews. reference architecture development and architectural decision making process — is desirable.
- Data classification framework design — sensitivity label schema, sensitive information type definition, auto-labelling policy configuration
- DLP policy architecture, implementation, and tuning across endpoint, network, and cloud channels
- Cloud data environments — AWS S3 and data services, Azure data services, M365 data flows; understanding of where sensitive data typically resides and how it moves across these platforms
- CASB concepts and tooling (Defender for Cloud Apps or equivalent) and how CASB and DLP capabilities interact and complement each other.
- GDPR and data protection obligations knowledge and how regulatory requirements translate into technical controls.
- AI service data handling models — understanding how tools including Microsoft Copilot, ChatGPT, and third-party AI services handle, retain, and potentially train on submitted data, and how to assess and mitigate that risk
- Broad awareness of data governance frameworks — including data cataloguing, lineage, access governance, and data quality — sufficient to engage meaningfully with data governance stakeholders and position data security as an enabler rather than a constraint.
- Able to operate with a high degree of autonomy — this role is building a capability from a fragmented baseline
- Strong credibility with senior technical stakeholders — able to engage as a peer with the Security Architect and experienced data professionals
- Clear communicator across audiences (English) — able to translate complex data security requirements into practical guidance for non-technical business stakeholders without losing precision with technical audiences
- Comfortable with ambiguity and incomplete information — the tooling landscape and scope for this capability are not yet fully defined and will require the post-holder to make reasoned recommendations and adapt and iterate designs as understanding develops
Our Offer
- Flexi-Week and Work-Life Balance: We prioritise your mental health and well-being, offering you a flexible four-day Flexi-Week at full pay and with no reduction to your annual holiday allowance. We also offer a variety of different paid special leaves as well as volunteer days.
- Remote Working Allowance: You will receive a monthly allowance to cover part of your running costs. In addition, we will support you in setting up your remote workspace appropriately.
- Pension: Awin offers access to an additional pension insurance to all employees in Germany.
- Flexi-Office: We offer an international culture and flexibility through our Flexi-Office and hybrid/remote work possibilities to work across Awin regions
- Development: We’ve built our extensive training suite Awin Academy to cover a wide range of skills that nurture you professionally and personally, with trainings conveniently packaged together to support your overall development.
- Appreciation: Thank and reward colleagues by sending them a voucher through our peer-to-peer program
Established in 2000, Awin is proud of our dynamic, social and inclusive culture.
Like all businesses, we’ve had to adapt and nurture our culture in a virtual environment. Our virtual ‘Life @ Awin’ hub brings our colleagues from across the globe together for various social activities.
Diversity & Inclusion are paramount to us, and we proudly pursue and hire diverse team members. We champion uniqueness and authenticity; this is who we are at our core. Our network of affiliate partnerships are diverse and transparent, as are the employees powering our vision to build the world’s leading open partner ecosystem. We welcome all backgrounds, identities, and experiences. If you need support at any point in the application or interview process, please let us know.
Awin is part of the Axel Springer group. Learn more at axelspringer.com/en/, and explore the Axel Springer Essentials here: axelspriger.com/en/inside/the-essentials-what-we-have-adapted-and-why
Apply now to begin the next stage of your career at a progressive company that supports both your professional and personal development.
#LI-AM1