Data Privacy Security Engineer

Stack

Responsibilities

• ▹Protect sensitive data across collection, processing, storage, sharing, retention and deletion
• ▹Map data flows and assess privacy and security risks across applications, analytics, integrations and third-party providers
• ▹Implement encryption, tokenization, masking, anonymization, retention and least-privilege data access controls
• ▹Work with data engineering teams to secure pipelines, databases, warehouses and cloud data services on AWS and GCP
• ▹Assess customer data shared with third-party AI model vendors and define minimization, approved use, retention and access controls
• ▹Own data and privacy controls for SC TRM and BNM RMiT, including assessments, evidence, remediation and audit support
• ▹Support privacy impact assessments, access reviews, monitoring, incident response and privacy-by-design reviews

Requirements

• ▹Degree in Computer Science, Information Security, Data Engineering or a related field, or equivalent experience
• ▹3+ years in data security, privacy engineering, security engineering or data platform engineering
• ▹Experience implementing and owning SC TRM and BNM RMiT controls relevant to data protection and technology risk
• ▹Understanding of privacy-by-design, data classification, retention, access management and third-party data sharing
• ▹Knowledge of encryption, key management, masking, tokenization, anonymization and secure data processing
• ▹Experience securing databases, data pipelines and AWS or GCP data platforms
• ▹Familiarity with applicable privacy and security frameworks and ability to collaborate across technical and compliance teams

Nice to have

• ▹Familiarity with AI vendor data flows

Soft skills

About the company

BJAK started in 2019 and is the leading online insurance platform in Southeast Asia, now expanding into other areas of personal finance such as saving, investing and travel. The team spans over 20 nationalities, working from offices and remotely.