សេចក្តីសង្ខេបនៃមុខតំណែង
To safeguard the Bank’s IT infrastructure and applications by proactively identifying, assessing, and mitigating security risks. The role is responsible for implementing and enforcing security controls, monitoring and responding to incidents, engaging with vendors for gap analysis, and ensuring compliance with regulatory requirements. Through effective planning of security projects, red/blue team testing, and risk assessments, this position ensures threats are contained, vulnerabilities are remediated, and the overall security posture of the organization remains strong.
ទំនួលខុសត្រូវការងារ
- Determine the types of logs to be monitored to ensure security risks are remediate
- Ensure security incidents are remediated and followed up so that threats can be contained
- Provide guidance and enforce new security policies to ensure new threats can be mitigated effectively
- Constantly engage with service providers/vendors to perform gaps analysis so that internal infrastructure is secured
- Identify areas and set scope to perform security risk assessment so that applications, operating system and databases are secured prior to deployment
- Set scope, budget, resource for new IT Security project implementation so that project can be deployed as per IT Security's requirements as planned
- Ensure security risks are under control and report high risk IT issues to the RMC
- Coordinate and design red team and blue team segregation to ensure security controls and testing are done in parallel to ensure effective security posture
- Design and plan security controls enforcement in accordance with regulatory requirements.
លក្ខខណ្ឌការងារ
- Bachelor’s degree in information technology or related field.
- Minimum 7–10 years of experience in IT Security, preferably within the banking industry, or equivalent professional certifications such as ITIL, CPTE, CCISO, or CISA.
