IT Security Engineer
About us
Bjak is focused on providing access to affordable and sustainable financial services for people in ASEAN. Headquartered in Malaysia, Bjak is the largest insurance portal in Southeast Asia. Our main portal, Bjak.com, helps millions find the insurance policy with the best value and highest coverage for them. Our investments in technology such as Custom API, trading systems and data science is to enable easy access to financial services that were previously inaccessible or difficult to understand.
Our core strengths are in navigating the most complex regulations and environments, creating some of the most innovative products in the world. For instance, we are the first platform globally to simplify and offer investment-linked life and health insurance online, coupled with an instant talk-to-agent service.
We are looking for an experienced IT Security Engineer to join our team immediately. This is a critical role focused on protecting Bjak’s systems, devices, and data from internal and external threats. As a tech-driven company, ensuring the security and integrity of our technology assets is non-negotiable. This role reports directly to senior management and is essential in ensuring our compliance with regulatory expectations.
Key responsibilities
Implement and manage security tools and protocols to safeguard devices, systems, and data.
Monitor and respond to potential security breaches or vulnerabilities.
Establish security standards, procedures, and policies for endpoint and system protection.
Conduct security audits and risk assessments to identify and close security gaps.
Lead incident response efforts in case of data breaches or security threats.
Ensure compliance with regulatory requirements and support any investigations or audits.
Collaborate with IT, operations, and compliance teams to reinforce security best practices.
Train employees on data protection and cybersecurity awareness, especially in operational areas.
Requirements
Bachelor’s degree in Computer Science, Information Security, or a related field.
2–3+ years of experience in IT security, cybersecurity, or information security roles.
Hands-on experience with endpoint protection, firewalls, anti-virus solutions, and security incident management.
Strong understanding of data protection laws, security frameworks, and compliance requirements (e.g., ISO 27001, NIST, etc.).
Experience in Cloud Security with GCP, AWS, or Azure.
Experience conducting internal audits and interfacing with regulators or compliance bodies is a strong advantage.
Ability to work independently in a fast-paced, high-pressure environment.
Immediate availability is highly preferred.
Do something meaningful; Be a part of the future of finance technology and the no.1 company in the industry!
Fast moving, challenging and unique business problems
International work environment and flat organization
Great career development opportunities in a growing company
Team culture - highly practical and results oriented
Free training and development, constantly improve yourself
Competitive salary
Flexible working hours & arrangement
Hybrid working mode