About BJAK
BJAK started with a powerful vision: empowering millions to manage, save, and grow their money smarter. Since 2019, we've revolutionized access to insurance, building Southeast Asia's leading mobile-first platform. But we're not stopping there. We're rapidly expanding our ecosystem to encompass spending, saving, investing, currency exchange, travel, and more, all driven by our mission to help people get more from their money every day.
We are a vibrant, global team of over 20 nationalities, working remotely and from our offices worldwide. We're driven by passion, not clock-watching, and dedicated to building groundbreaking next-generation products that redefine financial access for everyone, not just a select few. If you're passionate about innovation, impact, and pushing boundaries, you belong with us.
Data Privacy & Security Engineer
As a Data Privacy & Security Engineer at BJAK, you will be the guardian of our most critical assets: sensitive customer and business data. You'll play a pivotal role in ensuring the integrity, confidentiality, and availability of information across all our products, advanced data platforms, and third-party services. This isn't just about compliance; it's about embedding privacy-by-design into everything we build, collaborating closely with our Data, Engineering, Product, Legal, and Compliance teams to proactively mitigate risks and foster trust.
What You'll Be Building
Architect and implement robust data protection strategies across the entire data lifecycle: collection, processing, storage, sharing, retention, and secure deletion.
Conduct comprehensive data flow mapping and perform rigorous privacy and security risk assessments for all applications, analytics platforms, integrations, and third-party engagements.
Deploy advanced data protection mechanisms including encryption, tokenization, masking, anonymization, data retention policies, and granular least-privilege data access controls.
Collaborate directly with data engineering teams to secure data pipelines, databases, data warehouses, and cloud data services hosted on AWS and GCP.
Evaluate and define stringent controls for customer data shared with third-party AI model vendors, focusing on data minimization, approved use, retention policies, and access restrictions.
Serve as the primary owner for data and privacy controls pertaining to SC TRM and BNM RMiT, managing assessments, evidence collection, remediation efforts, and audit support.
Lead and support crucial privacy initiatives, including Privacy Impact Assessments (PIAs), regular access reviews, continuous monitoring, incident response, and embedding privacy-by-design principles throughout development cycles.
What We Look Fo
Education: Bachelor's degree in Computer Science, Information Security, Data Engineering, or a closely related technical field, or equivalent practical experience.
Experience: 3+ years of hands-on experience in data security, privacy engineering, security engineering, or data platform engineering roles.
Regulatory Expertise: Proven experience in implementing and owning controls relevant to data protection and technology risk, specifically for SC TRM and BNM RMiT.
Data Privacy Acumen: Deep understanding of privacy-by-design principles, data classification, data retention strategies, robust access management, and secure third-party data sharing practices.
Technical Proficiency: Strong knowledge and practical experience with encryption, key management systems, data masking, tokenization, anonymization techniques, and secure data processing methodologies.
Cloud & Data Platform Security: Demonstrated experience securing databases, complex data pipelines, and cloud data platforms (AWS or GCP). Familiarity with the security implications of AI vendor data flows is a significant plus.
Collaboration & Frameworks: Solid understanding of various privacy and security frameworks, coupled with exceptional ability to collaborate effectively across diverse technical and compliance teams.
Global Team, Global Language
As a global team, English is our primary working language. Excellent written and verbal English communication skills are essential for success in this role.