Data Privacy Security Engineer

BJAK is a leading mobile-first insurance platform in Southeast Asia, started in 2019, expanding into financial services including spending, saving, investing, exchanging, and travelling. The company operates globally with diverse teams working remotely and from offices.

• Degree in Computer Science, Information Security, Data Engineering, or related field, or equivalent experience.
• 3+ years in data security, privacy engineering, security engineering, or data platform engineering.
• Experience implementing and owning SC TRM and BNM RMiT controls relevant to data protection and technology risk.
• Understanding of privacy-by-design, data classification, retention, access management, and third-party data sharing.
• Knowledge of encryption, key management, masking, tokenization, anonymization, and secure data processing.
• Experience securing databases, data pipelines, and AWS or GCP data platforms; familiarity with AI vendor data flows is beneficial.
• Familiarity with applicable privacy and security frameworks and ability to collaborate across technical and compliance teams.

• Protect sensitive data across collection, processing, storage, sharing, retention, and deletion.
• Map data flows and assess privacy and security risks across applications, analytics, integrations, and third-party providers.
• Implement encryption, tokenization, masking, anonymization, retention, and least-privilege data access controls.
• Work with data engineering teams to secure pipelines, databases, warehouses, and cloud data services on AWS and GCP.
• Assess customer data shared with third-party AI model vendors and define minimization, approved use, retention, and access controls.
• Own data and privacy controls for SC TRM and BNM RMiT, including assessments, evidence, remediation, and audit support.
• Support privacy impact assessments, access reviews, monitoring, incident response, and privacy-by-design reviews.