About BJAK: Powering Financial Freedom, Securely.
At BJAK, we believe everyone deserves smarter ways to plan, save, and grow their money. This belief drives everything we do, from our name's origin to our cutting-edge financial solutions.
Launched in 2019, we revolutionized the insurance landscape by building Southeast Asia's first mobile-first insurance platform, making critical protection accessible online to millions. Today, we stand as the region's leading insurance platform.
But our journey doesn't stop there. We're rapidly expanding our ecosystem to empower people across the region with comprehensive financial services, including spending, saving, investing, exchanging, travel, and much more. Our mission is to help people get more from their money, every single day.
We are a truly global team, spanning over 20 nationalities, working from offices and remotely. We're a group of passionate individuals who genuinely love what we do. We seek the most talented and driven minds—those who are fueled by passion, not just hours; who thrive on building groundbreaking, next-generation products, not maintaining the status quo; and who are committed to redefining financial applications for everyone, not just an exclusive few.
If you're ready to make a significant impact on millions of lives, we'd love to connect with you.
Senior Data Security & Privacy Engineer
As a Senior Data Security & Privacy Engineer at BJAK, you will be a critical guardian of our most valuable assets: sensitive customer and business data. You'll work at the forefront of data protection, ensuring the security and privacy of information across all our innovative products, robust data platforms, and vital third-party services. Partnering closely with our Data, Engineering, Product, Legal, and Compliance teams, you will champion privacy-by-design principles and proactively reduce risks across our rapidly expanding financial ecosystem.
What You Will Build & Secure: Architect and implement robust controls to secure sensitive data throughout its entire lifecycle: collection, processing, storage, sharing, retention, and deletion. What We Look For: A Bachelor's degree in Computer Science, Information Security, Data Engineering, or a related technical field, or equivalent practical experience. Language
Proactively map intricate data flows, conducting comprehensive privacy and security risk assessments across applications, analytics platforms, integrations, and critical third-party providers.
Design and deploy advanced data protection mechanisms, including encryption, tokenization, masking, anonymization, data retention policies, and stringent least-privilege data access controls.
Collaborate closely with Data Engineering teams to fortify data pipelines, databases, data warehouses, and cloud data services hosted on AWS and GCP.
Evaluate and mitigate risks associated with customer data shared with third-party AI model vendors, defining strict data minimization, approved use, retention, and access control strategies.
Take ownership of data and privacy control implementation for regulatory frameworks like SC TRM and BNM RMiT, encompassing assessments, evidence collection, remediation planning, and audit support.
Champion privacy-by-design principles, supporting privacy impact assessments (PIAs), conducting regular access reviews, enhancing monitoring capabilities, and contributing to incident response protocols.
3+ years of progressive experience in data security, privacy engineering, security engineering, or data platform engineering.
Proven experience in implementing and owning controls pertinent to data protection and technology risk under regulatory frameworks like SC TRM and BNM RMiT.
Deep understanding of privacy-by-design principles, data classification, data retention strategies, access management best practices, and secure third-party data sharing.
Expertise in critical data protection technologies and methodologies, including encryption, key management, data masking, tokenization, anonymization, and secure data processing.
Hands-on experience securing diverse data environments, including databases, complex data pipelines, and cloud data platforms (AWS or GCP). Familiarity with AI vendor data flows is a significant advantage.
Familiarity with industry-leading privacy and security frameworks and a demonstrated ability to collaborate effectively across technical, legal, and compliance teams.
English is our main working language across global teams. Strong English communication is required.