Security Architect

BJAK is a leading insurance platform in Southeast Asia, started in 2019 to enable mobile-first online insurance accessible to millions in the region. The company is expanding its services in spending, saving, investing, exchanging, and travelling. It has a global workforce with over 20 nationalities working both remotely and from offices.

• Degree in Computer Science, Information Security, or related field, or equivalent experience.
• 5+ years in security engineering, security architecture, or a related security role.
• Experience implementing and owning SC TRM and BNM RMiT requirements, including control operation, evidence, and audit remediation.
• Strong knowledge of cloud and application security, IAM, networking, encryption, secure design, and distributed systems.
• Hands-on familiarity with AWS and GCP and architectures using TypeScript/Node.js, Python, Swift, and Kotlin.
• Experience with threat modeling, architecture reviews, risk assessments, and frameworks such as ISO 27001, NIST, CIS, or OWASP.
• Ability to translate regulatory and technical risks into clear, actionable plans for both technical and non-technical stakeholders.

• Define security architecture, patterns, and standards across products, applications, APIs, cloud environments, and integrations.
• Own architecture implementation and alignment with SC TRM and BNM RMiT, including control evidence, reviews, remediation, and audit support.
• Lead threat modeling and security design reviews for new products, major changes, third-party integrations, and critical systems.
• Design and review IAM, privileged access, network security, encryption, key management, secrets, logging, and threat detection controls.
• Review web, API, native mobile, AI-enabled, and data processing architectures for security and privacy risks.
• Guide secure architecture across TypeScript/Node.js, Python, Swift, and Kotlin applications and services on AWS and GCP.
• Evaluate security technologies, advise engineering leaders, and track remediation of material architecture risks.

English is the main working language across global teams. Strong English communication skills are required.