Senior Information Security Specialist

We are looking for a Senior Information Security Specialist at HangiKredi, which is Turkey's leading platform in the banking products comparison and application category since 2006, constantly renewing itself with its dynamic and financial assistant vision, visited by three out of every four people who conduct online loan research every year. Qualifications Graduated from relevant university departments Experienced in Information Security, IT Auditing, and Information Systems Security Knowledgeable about BRSA and CBRT regulations Preferably holds relevant national/international certifications Analytical thinker, proactive, with strong interpersonal skills Open to development in new technologies and products Developed planning, control, and follow-up skills, solution-oriented ISO 27001 Lead Auditor certifications Knowledge of regulations such as KVKK and GDPR Knowledge of security technologies such as SIEM, DLP, IDS/IPS, vulnerability scanning tools etc. Knowledge of the application security lifecycle Familiarity with SOC operations and security incident management processes Responsibilities Monitor daily the systems under the responsibility of Information Security Management and the processes running on these systems, and report the results to the manager Provide support in planning related to security products intended for use in the infrastructure Follow the technologies/developments in the field of Information Security Assist in audits, regular activities, coordination, follow-up, and improvement processes Track audit findings, action plans, and corrective activities for security vulnerabilities reported in penetration tests Assist in the creation and implementation of the necessary technical and administrative measures within the scope of the Personal Data Protection Law (KVKK) Actively participate in negotiations and work with third parties on Information Security and Auditing Participate in Information Security awareness training activities Support in the realization of Information Security breach analyses and prevention efforts Assist in keeping Information Security and Risk Management policies and procedures updated and ensuring their follow-up (ISO 27001, KVKK, BTK, GDPR, BRSA, and CBRT regulations) Establishment, implementation and continual improvement of the ISO 27001 Information Security Management System (ISMS) Preparation and maintenance of ISMS documentation (policies, procedures, instructions, risks, controls) Execution of information security risk assessment and risk treatment processes Planning, execution and follow-up of actions for internal audits within the scope of the ISMS Ensuring coordination with technical teams in relation to information security controls Supporting security incident management processes Preparing and carrying out internal information security awareness activities Monitoring relevant legal legislation, regulations and customer requirements Making the necessary preparations for external audits, certification and customer audits What We Offer? The opportunity to work with a young and dynamic team An environment open to innovation, where you can continuously develop yourself The chance to be part of a data-driven, customer-focused working environment The opportunity to work in an environment with constant development-oriented internal and external training The chance to be part of a workplace with comprehensive orientation and on-the-job training for quick adaptation Meal card benefits shared with employees during remote or office working processes Complementary private health and personal accident insurance benefits The opportunity to benefit from gifts shared on special occasions Your personal data will be processed in accordance with the law and as specified in the clarification text. You can access the lighting text from the https://www.hangikredi.com/aydinlatma-metni-ise-alim