About BJAK: Pioneering FinTech for MillionsAt BJAK, we're not just building financial products; we're redefining how people plan, save, and grow their money across Southeast Asia. Founded in 2019, we quickly became the region's leading mobile-first insurance platform, making financial accessibility a reality for millions.Our vision is expanding far beyond insurance. We're on a mission to empower individuals with smarter ways to spend, save, invest, exchange, and travel – truly helping them get more from their money every single day.We are a diverse, global team spanning over 20 nationalities, working remotely and from our offices around the world. We're driven by passion, not just hours; we build groundbreaking next-generation products, refusing to settle for the status quo. If you're passionate about leveraging technology to deliver the best financial applications for everyone, not just an exclusive few, then you belong with us.Ready to make a real impact? Let's talk.Your Mission: Secure BJAK's Digital FrontierAs a crucial member of our team, you will be the guardian of BJAK's most vital assets. Your mission is to secure our expansive cloud environments, robust networks, compute platforms, and core infrastructure across both AWS and GCP. You will be instrumental in strengthening our configuration, access controls, monitoring, resilience, and overall technology risk management.What You'll Be Building (Key Responsibilities)Architect, design, and continuously enhance robust security controls across our comprehensive AWS and GCP infrastructure, including networks, compute, storage, and various platform services.Conduct thorough reviews of cloud configurations and infrastructure changes, proactively identifying and mitigating misconfigurations, excessive permissions, exposure risks, and resilience vulnerabilities.Expertly manage critical security components such as Identity and Access Management (IAM), privileged access, network segmentation, encryption strategies, key management, secrets management, and secure connectivity solutions.Drive significant improvements in our cloud security monitoring, logging mechanisms, alerting systems, advanced threat detection capabilities, and swift incident response protocols.Take full ownership of cloud and infrastructure controls mandated by SC TRM and BNM RMiT regulations, including meticulous evidence collection, rigorous testing, effective remediation planning, and comprehensive audit support.Champion automation by designing and implementing security checks and infrastructure guardrails, leveraging infrastructure-as-code principles and scripting tools.Collaborate closely with engineering teams to enhance vulnerability management programs, backup and recovery strategies, business continuity plans, and overall secure operational practices.What You'll Bring (Who You Are)A Bachelor's degree in Computer Science, IT, Cybersecurity, or a related technical field, or equivalent practical experience that demonstrates your capability.A minimum of 3 years of hands-on experience in cloud, infrastructure, systems, or security engineering roles.Proven experience in implementing and overseeing SC TRM and BNM RMiT controls specifically for cloud and technology infrastructure.Demonstrable hands-on expertise in securing complex AWS and GCP environments and cloud-native architectures.Strong foundational knowledge and practical experience with IAM, networking principles, firewalls, encryption technologies, key management systems, system hardening techniques, and cloud security posture management (CSPM).Practical experience with infrastructure as code (IaC), automation scripting, vulnerability scanning tools, centralized logging solutions, and incident response methodologies.Excellent troubleshooting skills and the ability to communicate complex technical concepts effectively across platform, application, and compliance teams.LanguageAs a global organization, English is our primary working language. Strong English communication skills (written and verbal) are essential for this role.