Forge the Future of FinTech Security: Data & Privacy Security Enginee
At BJAK, we're not just building financial products; we're empowering millions across Southeast Asia to achieve financial freedom. Started in 2019, we rapidly grew to become the leading mobile-first insurance platform in the region, making essential services accessible to all. Today, our vision expands beyond insurance, encompassing a full suite of financial tools for spending, saving, investing, exchanging, and traveling. Our mission is clear: help people get more from their money, every single day.
Our global team, spanning over 20 nationalities, thrives on passion and innovation. We're a diverse group of problem-solvers who are redefining the financial landscape, building next-generation products that break the status quo and deliver unparalleled financial applications to everyone, not just a select few. If you're driven by impact, eager to innovate, and passionate about securing cutting-edge technology, we want to hear from you.
The Mission: Safeguard Our Digital Frontier
As a Data & Privacy Security Engineer, you will be a critical guardian of BJAK's most valuable assets: our sensitive customer and business data. You'll work at the forefront of our data ecosystem, spanning across innovative products, sophisticated data platforms, and vital third-party services. Collaborating closely with our Data, Engineering, Product, Legal, and Compliance teams, you will champion privacy-by-design principles, proactively identifying and mitigating risks to ensure the highest standards of data protection across our entire financial ecosystem.
What You'll Be Architecting & Securing
Design and implement robust data protection strategies throughout the entire data lifecycle – from secure collection and processing to resilient storage, sharing, retention, and deletion protocols.
Conduct comprehensive data flow mapping and rigorous privacy/security risk assessments across applications, analytics platforms, critical integrations, and third-party providers.
Implement and manage advanced data security controls, including encryption, tokenization, masking, anonymization, data retention policies, and robust least-privilege data access controls.
Partner with data engineering teams to fortify the security of our data pipelines, databases, warehouses, and cloud data services hosted on AWS and GCP.
Evaluate and secure customer data shared with third-party AI model vendors, defining stringent minimization, approved use, retention, and access control policies.
Own and drive data and privacy controls specifically for SC TRM (Technology Risk Management Guidelines) and BNM RMiT (Risk Management in Technology), including conducting assessments, providing evidence, leading remediation efforts, and supporting audits.
Support and conduct Privacy Impact Assessments (PIAs), access reviews, continuous monitoring, incident response, and integrate privacy-by-design principles into new product development.
What Will Make You Successful
A degree in Computer Science, Information Security, Data Engineering, or a related technical field, or equivalent demonstrable experience.
A minimum of 3 years of hands-on experience in data security, privacy engineering, security engineering, or data platform engineering, demonstrating a proven track record of impact.
Direct experience implementing and owning SC TRM and BNM RMiT controls pertinent to data protection and technology risk within a financial institution.
Deep understanding and practical application of privacy-by-design principles, data classification, data retention policies, access management frameworks, and secure third-party data sharing practices.
Expert knowledge of encryption methodologies, key management, data masking, tokenization, anonymization techniques, and secure data processing paradigms.
Proven experience in securing databases, data pipelines, and cloud-native data platforms on AWS or GCP. Familiarity with AI vendor data flows and their security implications is a significant advantage.
Strong familiarity with applicable privacy and security frameworks (e.g., GDPR, CCPA, ISO 27001) and exceptional ability to collaborate effectively across diverse technical and compliance teams.
Language
As a globally distributed team, English is our primary working language. Strong English communication skills, both written and verbal, are essential for this role.