Security Architect

Stack

Responsibilities

• ▹Define security architecture, patterns and standards across products, applications, APIs, cloud environments and integrations
• ▹Own architecture implementation and ongoing alignment with SC TRM and BNM RMiT, including control evidence, reviews, remediation and audit support
• ▹Lead threat modeling and security design reviews for new products, major changes, third-party integrations and critical systems
• ▹Design and review IAM, privileged access, network security, encryption, key management, secrets, logging and threat detection controls
• ▹Review web, API, native mobile, AI-enabled and data processing architectures for security and privacy risks
• ▹Guide secure architecture across TypeScript/Node.js, Python, Swift and Kotlin applications and services on AWS and GCP
• ▹Evaluate security technologies, advise engineering leaders and track remediation of material architecture risks

Requirements

• ▹Degree in Computer Science, Information Security or a related field, or equivalent experience
• ▹5+ years in security engineering, security architecture or a related security role
• ▹Experience implementing and owning SC TRM and BNM RMiT requirements, including control operation, evidence and audit remediation
• ▹Strong knowledge of cloud and application security, IAM, networking, encryption, secure design and distributed systems
• ▹Hands-on familiarity with AWS and GCP and architectures using TypeScript/Node.js, Python, Swift and Kotlin
• ▹Experience with threat modeling, architecture reviews, risk assessments and frameworks such as ISO 27001, NIST, CIS or OWASP
• ▹Able to translate regulatory and technical risks into clear, actionable plans for technical and non-technical stakeholders

Soft skills

About the company

BJAK started in 2019 and is the leading online insurance platform in Southeast Asia, now expanding into other areas of personal finance such as saving, investing and travel. The team spans over 20 nationalities, working from offices and remotely.