Senior Privacy & Data Security Engineer, AI Cloud Infrastructure

Kerry Consulting; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Kerry Consulting is seeking a Senior Security Engineer specializing in Privacy & Data Security to strengthen its global security and privacy capabilities, supporting cloud infrastructure across international markets with emphasis on data protection and compliance.

You will design practical security controls for data lifecycle, including encryption, key management, data discovery, access controls, retention and cross-border transfers, and work with Legal, Risk & Compliance, DPO and auditors to

Qualifications

• 5–8 years of hands-on security or data security engineering experience.
• Practical encryption, KMS/HSM, and cloud security expertise.
• Strong privacy engineering skills: data-flow mapping, data discovery, DSAR, minimisation, de-identification, Privacy by Design.
• Ability to interpret GDPR and translate into technical controls, TOMs, and security documentation.
• Experience with cloud/Kubernetes environments and ownership of at least one privacy/compliance implementation.

Responsibilities

• Design security controls for data throughout its lifecycle.
• Partner with Legal, Risk & Compliance, DPO, infrastructure security teams, auditors, and customers to meet regulatory requirements.
• Provide evidence for audits, due diligence, and maintain technical and organisational measures.

Skills

Encryption

KMS/HSM

Cloud security

Data-flow mapping

Personal-data discovery

DSAR implementation

Privacy by Design

GDPR understanding

Kubernetes

SOC 2 compliance

ISO 27001/27701

Job description

A fast-growing organisation in the AI Cloud Infrastructure space is looking for a Senior Security Engineer specialising in Privacy & Data Security to strengthen its global security and privacy capabilities. This role will support the delivery of cloud infrastructure across international markets, with a strong focus on data protection, privacy compliance, and the technical safeguards required for enterprise customers and regulatory obligations.

Role

You will work at the intersection of cybersecurity, privacy engineering, cloud infrastructure, and compliance. The role involves designing practical security controls for data throughout its lifecycle, including encryption, key management, data discovery, access controls, data protection, retention and deletion, and cross-border data transfers. You will also partner with Legal, Risk & Compliance, DPO, infrastructure security teams, auditors, and customers to translate regulatory requirements into implementable controls, maintain technical and organisational measures, and provide clear evidence for audits and customer due diligence.

Requirements

• 5-8 years of hands-on experience in security, data security, or a related engineering function, with practical expertise in encryption, KMS/HSM, and cloud security.
• Strong understanding of privacy engineering concepts, including data-flow mapping, personal-data discovery, DSAR implementation, data minimisation, de-identification, and Privacy by Design.
• Ability to interpret GDPR requirements and translate them into technical controls, TOMs, and security measures, with familiarity in SCC Annex II and DPA security documentation.
• Solid understanding of cloud and Kubernetes environments, including multi-tenant isolation, data flows, and integration with security tooling; with demonstrated ownership of at least one end-to-end privacy or GDPR/DPA compliance implementation.
• Excellent written and verbal communication skills, with the ability to work effectively across engineering, legal, compliance, audit, and customer-facing stakeholders; experience with SOC 2, ISO 27001/27701, compliance automation, or relevant privacy/security certifications would be advantageous.