Canadiabank

Information Security Officer

Hidden GemInformation TechnologyPosted 2 mo ago

Location

Phnom Penh

Job Type

FULLTIME

Experience

Fresh Graduate

Experience level

Associate

Work Mode

On-site

About the role

This role is responsible for safeguarding the organization's information systems by identifying and mitigating security vulnerabilities.
This role involves executing and performing penetration tests and security assessments to uncover potential security weaknesses and another task assigned.
Support senior team members in conducting penetration tests on web applications, mobile applications, and net infrastructure (internal and external).
Use automated scanning tools (like Nessus, OpenVAS, or Nmap) to identify known vulnerabilities and perform initial analysis.
Stay current with the latest cybersecurity threats, attack vectors, and vulnerabilities (e.g., OWASP Top 10).
Work with IT and development teams to explain findings and validate that vulnerabilities have been successfully remediated.
Learn and apply standard testing methodologies (e.g., PTES, OSSTMM) under supervision.
Collaborate with other Senior, Application Security and stakeholders to ensure the tasks are performed within timeline and proper process.
Provide support for any project reporting to management.
Support and provide required information for any audit activities.
Comply with all applicable regulations, rules, codes, guidelines and standards set by regulators and the Bank, and carry out duties with high integrity.
Adhere to all established risk control guidelines, procedures and measures to identify, assess, report, mitigate and monitor the risks involved in the day-to-day operations.

Requirements

Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field (or equivalent practical experience).
Basic knowledge of web application architecture and common vulnerabilities (e.g., SQL Injection, XSS, CSRF).
Basic experience with a scripting language (e.g., Python, Bash, or PowerShell).
Hands-on experience with security tools from projects, home labs, or internships.
Strong analytical and problem-solving skills.
Excellent written and verbal communication skills (for report writing).
A high degree of curiosity, persistence, and a passion for learning.
Ethical and professional integrity.
Certifications: Possession of or progress toward entry-level security certifications like CompTIA PenTest+, eJPT (eLearnSecurity Junior Penetration Tester), or CEH (Certified Ethical Hacker).
Active participation in Capture The Flag (CTF) competitions or platforms (e.g., TryHackMe, Hack The Box).
Experience with a personal home lab for security research.
Any prior internship or experience in an IT or security-related role.

Required Skills

Computer ScienceCybersecurityInformation TechnologyWeb application architectureSQL InjectionXSSCSRFPythonBashPowerShellSecurity toolsAnalytical skillsProblem-solving skillsWritten communication skillsVerbal communication skillsCuriosityPersistencePassion for learningEthical integrityProfessional integrity