---
title: 'Chief Information Security Officer at Bjak'
canonical: 'https://feeny.ai/job/chief-information-security-officer-bjak-malaysia-wv0xn2vx1nky'
type: 'job'
last_seen: '2026-09-11'
---

# Chief Information Security Officer at Bjak 

- **Company:** [Bjak ](https://feeny.ai/companies/bjak)
- **Location:** Malaysia
- **Employment:** full-time
- **Work type:** hybrid
- **Posted:** 2026-09-03
- **Last confirmed live:** 2026-09-11
- **Apply:** https://jobs.ashbyhq.com/bjakcareer/433b9303-89fa-47a1-b7a5-c452f8d4abac

## Job description

## About Doit

We are focused on reinventing how people spend, save, invest, exchange, travel, and more. Our objective is to build tools that will help people get more from their money and and become an expert at ease. We believe AI will help make finance smart, assessible and safe. We are looking for the most talented and driven people we can find. We are looking for people who work for their passion, not counting hours. Who loves building great next-generation products, not status quo. Who cares about redefining how everyone around us can get the best financial applications, not for an exclusive few. We have teams working around the world, with over 20 nationalities and growing from our offices and remotely. Join us and build a better future for our society. In 2019, we built the first mobile-first, insurance platform, enabling insurance to be accessible online by millions in the region. Today, it's the leading insurance platform in Southeast Asia.

## About the Role

The CISO will own information security and technology risk for doit Holdings, our regulated investment platform in Malaysia, and will be the person the board names as responsible for technology risk under the Securities Commission's Guidelines on Technology Risk Management. Nothing exists yet. The framework, the controls, the monitoring and the evidence all have to be built, and they have to hold up to an independent assessment before the platform can be registered.

## What you will be doing

- Hold the board-appointed responsibility for day-to-day technology risk oversight and for delivering the board's cyber security strategy.
- Build the technology risk and cyber security frameworks, the risk appetite statement and the policy set beneath them, and keep them approved and current.
- Run security operations across monitoring, vulnerability and patch management, access control, data protection, cryptography and secure development.
- Own incident response from detection through recovery, including the report to the SC on the day an incident occurs.
- Take the platform through the independent technology validation that gates registration, and close what it finds.
- Take ISO/IEC 27001 from scoping through to certification.
- Deliver the annual cyber security awareness programme across the board, senior management and staff.

## What you will need

- Deep information security background, with at least 8 years in the field including 5 in financial services or another regulated sector.
- At least one of CISSP, CISM or CISA. This is a requirement. These are the certifications the SC names as acceptable for the external party who assesses technology risk controls, and the officer who owns those controls should not sit below the standard set for the officer who audits them.
- Deep command of the SC's Guidelines on Technology Risk Management, operationalised rather than restated.
- Real depth in cyber security, operational resilience, and cloud and third-party risk.
- ISO/IEC 27001 implementation experience through to certification.
- A degree in computer science, information technology, information security or a cognate discipline, and able to meet the SC's fit and proper criteria.
- ISO/IEC 27001 Lead Implementer or Lead Auditor, CRISC or CCSP, or experience of an SC or BNM technology examination, is useful.
- Hands-on operating style. Able to review the controls, run the simulation and close the gaps personally.

Location This is a hybrid role. You are expected to work from our local office at least 3 days per week, with the remaining days offering flexibility to work remotely.

Candidates should be based in, or able to work from, the location where the role is advertised.

Language English is our main working language across global teams. Strong English communication is required.

Interview Process Our process is designed to move fast:

1. Introductory conversation
2. Technical and regulatory deep dive
3. CEO / final round

For strong candidates, we aim to complete the process and make an offer within 1 week from the start of the interview process. Candidates who complete assessments quickly will be prioritized.

## About Bjak 

## Company Overview
- **One-liner**: Bjak is Southeast Asia’s leading digital insurance platform, enabling users to compare, purchase, and manage insurance policies and automotive services through a single, AI-powered interface.
- **Entity Type**: Private (Seed Stage)
- **Headquarters**: Selangor, Malaysia
- **Founded**: 2019
- **Founders**: Not publicly available

## Core Business
- **Primary industry**: Insurtech / Financial Services (with a growing automotive service vertical)
- **Target customers**: B2C (individuals seeking insurance and car repairs), B2B (partnerships with 16 insurers and workshop networks)
- **Mission**: “To develop technology‑based solutions to improve financial inclusion.”

## Products & Services
- **Insurance Platform (SaaS / Marketplace)**: Compare quotes from 16 insurers, purchase policies, manage claims, and access 24/7 VIP support. Supported by an AI agent.
- **Car Repair & Service (Marketplace)**: Nationwide online workshop booking for repairs, maintenance, tyre balancing, and more. Includes pay‑later options (installments from RM10/month).
- **Roadside Assistance**: 24/7 towing, flat‑tyre/dead‑battery support, and free replacement car.
- **Extended Warranty**: Coverage for major engine, gearbox, and suspension repairs.
- **Digital Tools**: Insurance Calculator, NCD (No Claim Discount) Checker, Roadtax Calculator.

## Market Standing
- **Valuation/Market Cap**: Not disclosed (private); the founder has indicated the company is considering an IPO to expand into Europe.
- **Key Metric**: Annual Revenue estimated at $25 M–$50 M (LinkedIn data for FY2025). Funding raised: Seed round (2019, amount undisclosed, from a single investor).
- **Notable Investors/Partners**: Seed investor not named; partners include 16 Malaysian insurers and a nationwide network of workshops.
- **Growth Signals**: 8 M+ users across Southeast Asia; 32.2% YoY headcount growth (100 employees); 356 open positions (up 278.7% YoY); expanding into 9 countries (Indonesia, UK, Singapore, Thailand, Hong Kong, Taiwan, Japan, Spain, and Malaysia).

## Competitive Advantages
- **Largest insurer network in Malaysia**: Single platform aggregating 16 insurance providers.
- **Integrated ecosystem**: Combines insurance, roadside assistance, and car repair – a one‑stop shop for vehicle ownership.
- **AI & automation**: Uses AI agents to simplify policy selection and claims processes.
- **Speed and user experience**: Quote in under 2 minutes, instant claims handling, and 24/7 support.

## Strategic Focus
- **Geographic expansion**: Entering European markets, with an IPO under consideration.
- **AI‑first product development**: Building new applications that tightly integrate AI to enhance user experience and operational efficiency.
- **Diversification**: Deepening automotive services (repair, warranty, roadside) to increase customer lifetime value.
- **Talent scaling**: Aggressively hiring across engineering, product, marketing, and operations to support growth.

## Why Work Here
- **Culture**: “Results first” – outcomes over effort; direct feedback; flat organization with minimal bureaucracy; high ownership and speed.
- **Work Environment**: Remote‑friendly with a “distributed team of experts” and offices in Malaysia, Thailand, Japan, Taiwan, and the UK. Recruiting globally.
- **Engineering Focus**: Lean, autonomous teams that prioritise product excellence and swift delivery.
- **Career Growth**: Rapidly scaling company with 356 open roles (including Lead, Founder’s Office, iOS Engineer, DevOps, ML Engineer) – opportunities for impact and advancement.
- **Note on Employer Rating**: Current Glassdoor-style rating is 2.3/5 (198 reviews) – potential concerns around work‑life balance and compensation. Candidates should verify recent employee sentiment during interviews.

## Sources
1. [bjak.my](https://bjak.my/en) – Official website (product overview, mission)
2. [bjak.my/en/career](https://bjak.my/en/career) – Career page (culture, values)
3. [jobs.ashbyhq.com/bjakcareer](https://jobs.ashbyhq.com/bjakcareer) – Active job listings and team descriptions
4. [linkedin.com/company/bjak](https://my.linkedin.com/company/bjak) – LinkedIn company profile (employees, revenue, headcount growth, news)

## Other roles at Bjak 

- [Recruiting Operations Coordinator](https://feeny.ai/job/recruiting-operations-coordinator-bjak-hong-kong-7vmsr27za46t) — Hong Kong
- [Recruiting Coordinator](https://feeny.ai/job/recruiting-coordinator-bjak-hong-kong-bvdc2vcvrjjd) — Hong Kong
- [Creative Project Executive](https://feeny.ai/job/creative-project-executive-bjak-malaysia-rqpq3y3kcqy6) — Malaysia
- [Senior Compliance Director – UK](https://feeny.ai/job/senior-compliance-director-uk-bjak-united-kingdom-rrggrrdbjrfj) — United Kingdom
- [Regulatory Compliance Director](https://feeny.ai/job/regulatory-compliance-director-bjak-united-kingdom-kx3rrqbh8bsy) — United Kingdom
- [SMF16 Compliance Oversight Director](https://feeny.ai/job/smf16-compliance-oversight-director-bjak-united-kingdom-ddsrjzy1pcrs) — United Kingdom
- [Compliance Director – SMF16](https://feeny.ai/job/compliance-director-smf16-bjak-united-kingdom-7866g217n5rs) — United Kingdom
- [Head of Compliance – SMF16](https://feeny.ai/job/head-of-compliance-smf16-bjak-united-kingdom-y73w270vd3eb) — United Kingdom
- [Director of Compliance and Risk (UK)](https://feeny.ai/job/director-of-compliance-and-risk-uk-bjak-united-kingdom-7pan19xm9tg0) — United Kingdom
- [Head of Compliance and Risk (UK)](https://feeny.ai/job/head-of-compliance-and-risk-uk-bjak-united-kingdom-f3y4sgw5zhae) — United Kingdom