The Manager, IT Security Testing Unit leads FTB’s security testing program to identify, validate, prioritize, and report technology and cyber risks across banking systems, infrastructure, digital channels, applications, APIs, payment/card environments, and third‑party technology services. The role manages vulnerability assessment, penetration testing, application security testing, mobile/API testing, segmentation testing, adversarial attack simulation coordination, retesting, remediation tracking, and management reporting. The role must ensure testing is performed safely, ethically, and within approved scope, rules of engagement, test windows, data protection requirements, and regulatory expectations.

Responsibilities

- Develop, maintain, and execute the Bank’s annual IT security testing plan covering applications, infrastructure, network, mobile, API, digital banking, payment systems, and critical technology environments.
- Lead internal security testing activities within approved scope, test window, rules of engagement, change coordination, data protection requirements, rollback plans, and escalation procedures.
- Conduct and/or supervise vulnerability assessments and penetration testing to identify security weaknesses in systems, applications, networks, and banking technology platforms.
- Define security testing methodology, test scope, risk rating criteria, acceptance criteria, evidence requirements, and reporting format for each engagement.
- Coordinate and lead external penetration testing, red team/adversarial simulation, PCI DSS testing, SWIFT‑related testing, and other independent security assessment projects.
- Validate and retest identified vulnerabilities after remediation to confirm effective closure and reduce repeat findings.
- Track, report, and elevate remediation progress for vulnerabilities, including overdue, repeated, high‑risk, and critical findings.




- Maintain proper security testing records, including test scope, evidence, findings, risk rating, remediation action, retest result, closure status, and management approval where required.
- Prepare and present technical and executive‑level reports to management, IT Risk Committee, system owners, application owners, and relevant stakeholders.
- Support compliance with NBC TCRMG, PCI DSS, SWIFT CSP, ISO 27001, OWASP, and internal IT security policies and procedures.
- Review security testing results from internal teams, external vendors, auditors, regulators, and third‑party service providers.
- Work with system owners, application owners, infrastructure teams, digital banking teams, and vendors to ensure timely remediation of security weaknesses.
- Provide security testing advice for current systems, applications, digital banking services, infrastructure changes, and technology projects before production deployment.
- Monitor emerging threats, attack techniques, exploit trends, vulnerabilities, and security testing tools relevant to the Bank’s environment.
- Develop and improve security testing procedures, checklists, templates, testing standards, reporting formats, and key performance indicators for the unit.

Qualifications

- Bachelor’s degree or equivalent in Computer Science, Information Technology, Cybersecurity, Software Engineering, or related field.
- Professional certification is strongly preferred: OSCP, eCPPT, CEH/CPENT, eJPT, or equivalent penetration testing/application security certification.
- Minimum 5 years of cybersecurity experience, including at least 3 years in vulnerability assessment, penetration testing, application security testing, or security control assessment.
- At least 3 years of team leadership, project coordination, vendor management, or management reporting experience is preferred.
- Banking, financial services, payment/card, SWIFT, or digital banking experience is strongly preferred.

#J-18808-Ljbffr

📌 Manager, IT Security Testing Unit (Southern Downs Regional)
🏢 Foreign Trade Bank of Cambodia
📍 Southern Downs Regional