Job
- Level
- Experienced
- Job Field
- IT, Application, Security
- Employment Type
- Part Time/Full Time
- Contract Type
- Permanent employment
- Location
- Frankfurt
- Working Model
- Hybrid, Onsite
Job Summary
In this role, you will develop holistic data security architectures for on-prem, cloud, and hybrid environments, implementing modern security concepts to protect sensitive data while complying with regulatory requirements.
Job Technologies
Your role in the team
- Development, maintenance, and further development of comprehensive data security architectures for complex on-premises, cloud, and hybrid environments.
- Definition and implementation of security standards, policies, and architectural principles for data classification, data protection, encryption, key management, secure data flows, and data access.
- Design and implementation of modern data security concepts (including Data Loss Prevention, Data Classification & Labeling, encryption, tokenization, masking, Data Access Governance).
- Design and further development of secure data zones, protection needs-oriented data processing, and safeguarding sensitive data throughout their entire lifecycle in accordance with regulatory and supervisory requirements.
- Consulting of business units, IT teams, and DevOps on secure data and integration designs (Secure-by-Design) as well as the implementation of new applications, services, and third-party integrations involving data.
- Planning, implementation, and continuous improvement of data security components and controls (e.g., DLP, encryption, key management, secrets management, data discovery, data access controls).
- Assessment of data risks as well as conducting threat modeling, architecture, and security reviews for data processing, analytics, and integration solutions.
- Specific co-design of the security architecture for AI/ML platforms and GenAI/LLM services, including securing training, testing, and production environments as well as data flows between AI models and peripheral systems.
- Identification, assessment, and mitigation of AI-specific risks (e.g., prompt injection, data leakage, model poisoning, model inversion, bias & fairness risks) as well as derivation of appropriate security and governance measures.
- Definition of policies and guardrails for the secure handling of AI/GenAI solutions (e.g., protection of trade secrets and customer data when using internal and external LLMs, secure API usage, policy and access concepts).
- Ensuring compliance with regulatory requirements (e.g., DORA, GDPR) in the banking sector regarding data protection, data security, and the safeguarding of sensitive or critical information.
- Collaboration with information security, risk and compliance units, data management/governance teams, infrastructure teams, as well as external auditors and service providers.
- Support in data-related security incidents (Incident Response) as well as the further development of associated monitoring, logging, and detection concepts.
- Participation in the design of monitoring, logging, and detection mechanisms for AI/ML workloads (e.g., anomaly detection in training data or model usage, abuse of GenAI services).
- Monitoring (regulatory) developments in the field of AI security and AI governance (e.g., EU AI Act) as well as translating these requirements into concrete data and AI security architectures.
- Monitoring technological trends in the field of Data Security & Data Governance (e.g., DSPM, Data Access Governance, Confidential Computing, AI/Data Security) and deriving actionable recommendations for the bank.
This text has been machine translated. Show original
Our expectations of you
Education
- Completed degree in (Business) Informatics, IT Security, or a comparable qualification.
Qualifications
- In-depth knowledge of securing structured and unstructured data, data classification, encryption, key management, data privacy, as well as secure data flows across on-premises, cloud, and hybrid environments.
- In-depth knowledge of regulatory and supervisory requirements in the financial sector (e.g., DORA, GDPR) and their implementation in the field of data security.
- Affinity for modern AI/Data platforms (e.g., cloud-based AI services, LLM platforms) and their secure integration into existing banking and data landscapes.
- Very good analytical skills as well as a structured, risk-oriented, and solution-oriented way of working.
- Strong communication and advisory skills to effectively convey complex data security topics to specialized departments and management.
Experience
- Several years of experience in Data Security Architecture, ideally in the financial or banking sector.
- Extensive experience with data security technologies and controls such as Data Loss Prevention, Data Discovery/Classification, Key Management, Secrets Management, Tokenization, Masking, as well as access control and monitoring solutions.
- Experience in securing data platforms, data integrations, and analytics environments, as well as in handling sensitive, confidential, or regulatory data securely.
- Experience in securing AI/ML environments and data pipelines (e.g., MLOps platforms) as well as in the secure operation of GenAI/LLM solutions in regulated environments and understanding the specific security challenges of AI systems.
- Ideally, knowledge in the field of AI governance and AI compliance (e.g., EU AI Act, internal AI policies) as well as experience in their practical implementation in the context of data and information security.
- Experience with architecture frameworks and security models (e.g., Zero Trust, NIST) as well as in documenting target architectures, roadmaps, and architecture decisions.
This text has been machine translated. Show original
What we offer
- 30 days of vacation.
- Flexible working.
- Professional Training & Development.
- Asset-building benefits.
- Friendly working environment.
- Diverse tasks.
- Work-Life Balance.
This text has been machine translated. Show original
Benefits
Work-Life-Integration
More net
Health, Fitness & Fun
Topics that you deal with on the job
Job Locations
This is your employer
Commerzbank AG
Commerzbank is an internationally-operating commercial bank with locations in nearly 50 countries and 49,000 employees. It offers a comprehensive range of financial services to private, business, and corporate customers. Commerzbank is a reliable and trusted source for all your banking needs.
Description
- Company Size
- 250+ Employees
- Company Type
- Established Company
- Working Model
- Full Remote, Hybrid, Onsite
- Industry
- Banking, Finance, Insurance
Employer reviews
by devworkplaces.com
Total
(1 Review)3.6
Workingconditions
4.4Engineering
3.2Career Growth
3.6Culture
3.5
Data Security Architect
- Location
- Frankfurt
- Working Model
- Hybrid, Onsite
- Diversity
- Open for all genders
