Manager of Assessment & Cyber Incident Response Unit

About the role

KB Prasac Bank is looking for a Manager of Assessment & Cyber Incident Response Unit based at its Head Office in Phnom Penh. The role leads security risk assessments, cyber incident response, and the development of security policies and staff.

Key responsibilities

• Lead security risk assessments for IT systems and digital platforms, and provide actionable mitigation recommendations.
• Plan, coordinate and oversee cybersecurity assessments, penetration tests and vulnerability scans.
• Develop and maintain security policies, procedures and standards in line with organisational and regulatory requirements.
• Manage cyber incident response and coordination, and plan and run cybersecurity exercises and testing simulations.
• Lead cybersecurity awareness and training programmes.
• Monitor emerging threats, vulnerabilities and trends to inform security strategy.
• Mentor and develop cybersecurity assessment staff and ensure processes follow industry best practices such as ISO 27001, NIST and PCI-DSS.

Required profile

• Bachelor's or Master's degree in Information Technology, Computer Science, Cybersecurity, Information Security or a related field.
• Minimum 7-10 years of experience in cybersecurity, risk assessment or IT security management.
• At least 3 years in a managerial or supervisory role, preferably in a bank, financial institution or other highly regulated organisation.
• Good English speaking, writing and listening skills.
• Team player with good communication skills.

Required skills

• Strong knowledge of cybersecurity frameworks and standards (ISO 27001, NIST, PCI-DSS, GDPR).
• Experience in vulnerability assessments, penetration testing and risk management.
• Preferred certifications: CISSP, CISM, CRISC, CEH.
• Project management experience in cybersecurity initiatives is a plus.

To apply, interested candidates must complete the employment application form and attach copies of their documents (photos, family book, birth certificate, national ID card and diplomas) to the Head Office in Phnom Penh or by e-mail. Only shortlisted candidates will be contacted by phone for a writing test or interview.