Senior Privacy & Data Security Engineer, AI Cloud Infrastructure
Posted Updated
Summary
Senior security engineer role at an AI cloud-infrastructure organisation in Singapore, focused on privacy and data security: designing encryption, key-management, access, retention, and cross-border data controls, and translating GDPR and audit requirements (SOC 2, ISO 27001) into technical safeguards alongside legal, compliance, and infrastructure teams.
A fast-growing organisation in the AI Cloud Infrastructure space is looking for a Senior Security Engineer specialising in Privacy & Data Security to strengthen its global security and privacy capabilities. This role will support the delivery of cloud infrastructure across international markets, with a strong focus on data protection, privacy compliance, and the technical safeguards required for enterprise customers and regulatory obligations.
Role You will work at the intersection of cybersecurity, privacy engineering, cloud infrastructure, and compliance. The role involves designing practical security controls for data throughout its lifecycle, including encryption, key management, data discovery, access controls, data protection, retention and deletion, and cross-border data transfers. You will also partner with Legal, Risk & Compliance, DPO, infrastructure security teams, auditors, and customers to translate regulatory requirements into implementable controls, maintain technical and organisational measures, and provide clear evidence for audits and customer due diligence.
Requirements 5-8 years of hands-on experience in security, data security, or a related engineering function, with practical expertise in encryption, KMS/HSM, and cloud security. Strong understanding of privacy engineering concepts, including data-flow mapping, personal-data discovery, DSAR implementation, data minimisation, de-identification, and Privacy by Design. Ability to interpret GDPR requirements and translate them into technical controls, TOMs, and security measures, with familiarity in SCC Annex II and DPA security documentation. Solid understanding of cloud and Kubernetes environments, including multi-tenant isolation, data flows, and integration with security tooling; with demonstrated ownership of at least one end-to-end privacy or GDPR/DPA compliance implementation. Excellent written and verbal communication skills, with the ability to work effectively across engineering, legal, compliance, audit, and customer-facing stakeholders; experience with SOC 2, ISO 27001/27701, compliance automation, or relevant privacy/security certifications would be advantageous.
To Apply Interested candidates, please submit your resume to Grace Lim at (HIDDEN TEXT). We regret to inform that only successful shortlisted candidates will be notified. License No: 16S8060 Registration no: R1988923
Role You will work at the intersection of cybersecurity, privacy engineering, cloud infrastructure, and compliance. The role involves designing practical security controls for data throughout its lifecycle, including encryption, key management, data discovery, access controls, data protection, retention and deletion, and cross-border data transfers. You will also partner with Legal, Risk & Compliance, DPO, infrastructure security teams, auditors, and customers to translate regulatory requirements into implementable controls, maintain technical and organisational measures, and provide clear evidence for audits and customer due diligence.
Requirements 5-8 years of hands-on experience in security, data security, or a related engineering function, with practical expertise in encryption, KMS/HSM, and cloud security. Strong understanding of privacy engineering concepts, including data-flow mapping, personal-data discovery, DSAR implementation, data minimisation, de-identification, and Privacy by Design. Ability to interpret GDPR requirements and translate them into technical controls, TOMs, and security measures, with familiarity in SCC Annex II and DPA security documentation. Solid understanding of cloud and Kubernetes environments, including multi-tenant isolation, data flows, and integration with security tooling; with demonstrated ownership of at least one end-to-end privacy or GDPR/DPA compliance implementation. Excellent written and verbal communication skills, with the ability to work effectively across engineering, legal, compliance, audit, and customer-facing stakeholders; experience with SOC 2, ISO 27001/27701, compliance automation, or relevant privacy/security certifications would be advantageous.
To Apply Interested candidates, please submit your resume to Grace Lim at (HIDDEN TEXT). We regret to inform that only successful shortlisted candidates will be notified. License No: 16S8060 Registration no: R1988923