Chief Information Security Architect

Yıldız Tech; Üsküdar; On-site; TRY 1,200,000 - 1,300,000; Full time

Job summary

Yıldız Tech seeks a senior Information Security leader to collaborate with the Information Security Director and oversee enterprise-wide security initiatives. You will drive governance, risk management, and regulatory compliance across the group, ensuring robust protection for infrastructure and applications.

Ideal candidates have 8+ years in information security, holding CISA/CISM/CISSP or equivalent, with fluency in English and Turkish, and strong communication skills to align security with

Qualifications

• Bachelor’s degree in a technical field or related discipline.
• Minimum 8 years of experience in information security governance, cybersecurity product management, risk, or compliance.
• Security frameworks: ISO 27001, NIST, COBIT, ITIL, PCI-DSS.

Responsibilities

• Lead design and continuous improvement of enterprise-wide Information Security Management System across Yıldız Holding and group companies.
• Identify information security risks and implement robust controls for infrastructure and applications.
• Establish security policies, standards, and best practices across application, infrastructure, and cloud domains.
• Ensure adherence to KVKK/GDPR, SOX, PCI-DSS; lead audits (COBIT, IT Controls) and remediate findings.
• Provide strategic and tactical security guidance for IT projects with regulatory alignment.
• Develop and report KPIs to measure security maturity and program effectiveness.
• Drive security and privacy awareness programs to foster a security-conscious culture across the organization.
• Collaborate with Finance, Legal, Audit to prioritize security investments and lead cross-functional teams.

Skills

Security governance

Cybersecurity product management

Regulatory compliance

ISO 27001

CISA/CISM/CISSP

Bilingual EN/Turkish

Strategic planning

Audit coordination

Education

Bachelor’s degree

Tools

COBIT

ITIL

PCI-DSS

Job description

Yıldız Tech seeks a senior Information Security leader to collaborate with the Information Security Director and oversee enterprise-wide security initiatives. You will drive governance, risk management, and regulatory compliance across the group, ensuring robust protection for infrastructure and applications.

Ideal candidates have 8+ years in information security, holding CISA/CISM/CISSP or equivalent, with fluency in English and Turkish, and strong communication skills to align security with