Information Security & Compliance Manager

AMK Microfinance Institution Plc. is one of the largest microfinance institutions in Cambodia. AMK serves a large number of over 400,000 customers with more than 1,800 staffs nationwide.

Job Title: Information Security & Compliance Manager
Report to: Chief Information Officer
Location: Head Office
Closing Date: June 10, 2015

Job Responsibilities:
♦ Monitors compliance with the information security policies and procedures among employees, contractors, partners, and other third parties
♦ Ensures the completeness and successiu I ness of Business Continuity Plans 'BCP' for AMK's systems
♦ Initiates, facilitates, and promotes activities to foster information security awareness within the AMK
♦ Monitors and reports on business security issues (Regularly report to ITC on the progress of implementation of security and establishing the method to reduce the vulnerability to fraud, abuse or waste)
♦ Actively leads the updating and maintaining of current security patches on live systems
♦ Develops and maintains a strategic plan for information security that aligns security controls with business requirement for information protection
♦ Supports the delivery of IT and/or network security procedures or processes, operations and architectural solution for AMK that support the business aims and take into account appropriate legal, regulatory constraints
♦ Prime line in response to any security breaches and takes into account to coordinate with relevant team to resolve the issue
♦ Provides recommendation on IT security for new IT project or system
♦ Undertakes testing and validation of hardware, firmware and software for possible impacts on security
♦ Completes assigned elements of IT security risks assessment and compliance audits
♦ Manages where applicable Information Security Et Compliance team to ensure high performing and well-motivated people delivering a specific function or service
♦ Developing and coordinating the training program on security and compliance
♦ Work closely with IT, Business, Risk, legal etc... on implementation and re-enforcement on compliance required

Qualification and Experiences:
♦ At least Bachelor degree or equivalent on Computer Science or Information Technology;
♦ At least 3 years of network and IT security experience , and Microfinance or Banking sector is preferred;
♦ Certified IT Assurance and Security Audit is preferred;
♦ Cisco/Checkpoint certification is preferred;
♦ Experienced with various vulnerability scanning tools and services, current information security technology, resources and systems;
♦ Highly experienced in access controls, firewalls, intrusion detection systems, and overall knowledge of computer security systems is required;
♦ Expertise in the area of information security including planning and implementing Disaster Recovery and Business Continuity plans;
♦ Experienced in the creation & reviewing of technical documentation;
♦ Good in written and verbal communication skills and the ability to communicate effectively at all levels of the business;
♦ Ability to work independently or as a team member;
♦ Good organization and execution skills.

AMK offers a competitive salary, performance incentive, Khmer New Year bonus, pension fund benefit, accident insurance, full medical cost reimbursement for employee, spouse, and dependent. Working conditions are complied with Cambodian labor law.

Interested candidates should apply by sending a CV and a cover letter to: AMK branch and sub-branch offices or Head Office, Building 285, Yothapol Khemarak Phoumin Blvd. (271), Sk. Tomnub Tuek, Kh. Chamkarmorn, Phnom Penh, Cambodia or E-mail: [email protected]

• A copy of obtained certificates or confirm letter by the University
• A copy of national identification, family book, and certificate of birth
• A copy of transcript is preferred.

For additional information, please contact at Tel: (023) 993 062 / (023) 224 763 or visiting website:
AMK is an equal opportunity employment. Qualified women and disabled people are encouraged to apply.
Only short-listed candidates will be contacted for interview.