9 hours ago
Remote, WorldwideSenior
Responsibilities
- Define security architecture, patterns, and standards across products, applications, APIs, cloud environments, and integrations.
- Own implementation and ongoing alignment with SC TRM and BNM RMiT, including control evidence, reviews, remediation, and audit support.
- Lead threat modeling and security design reviews for new products, major changes, third-party integrations, and critical systems.
- Design and review IAM, privileged access, network security, encryption, key management, secrets, logging, and threat detection controls.
- Review web, API, native mobile, AI-enabled, and data processing architectures for security and privacy risks.
- Guide secure architecture across TypeScript/Node.js, Python, Swift, and Kotlin applications and services on AWS and GCP.
- Evaluate security technologies, advise engineering leaders, and track remediation of material architecture risks.
Requirements
- Degree in Computer Science, Information Security, or a related field, or equivalent experience.
- At least 5 years of experience in security engineering, security architecture, or a related security role.
- Experience implementing and owning SC TRM and BNM RMiT requirements, including control operation, evidence, and audit remediation.
- Strong knowledge of cloud and application security, IAM, networking, encryption, secure design, and distributed systems.
- Hands-on familiarity with AWS and GCP and architectures using TypeScript/Node.js, Python, Swift, and Kotlin.
- Experience with threat modeling, architecture reviews, risk assessments, and frameworks such as ISO 27001, NIST, CIS, or OWASP.
- Ability to translate regulatory and technical risks into clear, actionable plans for technical and non-technical stakeholders.
- Strong English communication skills.
Tech Stack
Categories
About Bjak
Bjak builds an online insurance marketplace for consumers in Malaysia and Southeast Asia, enabling comparison and purchase of car, health, life, and travel policies. Its business model is aggregator-based, earning commissions and fees from insurers and partners while streamlining digital applications and renewals. Founded in 2019 and headquartered in Selangor, it is privately held and is expanding from insurance comparison into broader fintech services via a planned finance super app.