CISO, Crypto Security & Regulatory Leader — Turkey

Bybit; Fatih; On-site; TRY 1,200,000 - 1,800,000; Full time

Job summary

Bybit, a leading cryptocurrency exchange, seeks a security executive in Turkey to lead audits, policy, and incident response. You will manage local security programs, cloud and wallet security, and regulatory interactions with SPK and TÜBİTAK.

You will also build and mentor the local security team and drive risk management across the organization. The role requires deep expertise in KVKK and multi-jurisdictional compliance, with strong Turkish and English communication.

Qualifications

• 8+ years of information security experience with leadership roles.
• Experience with Turkish regulators (SPK) and TÜBİTAK-type audits.
• Strong knowledge of KVKK implementation.
• Cloud, network and application security expertise.
• Experience building security programs in regulated financials.
• Excellent communication in Turkish and English.
• Ability to translate risk into business impact.

Responsibilities

• Serve as primary security contact for audits and regulatory inspections.
• Maintain local security policy aligned with SPK, TÜBİTAK and ISO 27001/NIST CSF.
• Lead local incident response as CISO-level commander for high-severity events.
• Oversee security architecture for local infra, cloud and customer platforms.
• Oversee controls for wallet infrastructure and key management per SPK.
• Build and manage the local security team and capabilities.
• Maintain risk register and present risk status to senior management.
• Act as security representative in management meetings and regulatory discussions

Skills

InfoSec leadership

Regulatory audits SPK

KVKK compliance

Cloud security

Network security

App security

Turkish & English

Risk management

Education

CISSP

CISM

CISA

ISO 27001 Lead Auditor

Job description

Bybit, a leading cryptocurrency exchange, seeks a security executive in Turkey to lead audits, policy, and incident response. You will manage local security programs, cloud and wallet security, and regulatory interactions with SPK and TÜBİTAK.

You will also build and mentor the local security team and drive risk management across the organization. The role requires deep expertise in KVKK and multi-jurisdictional compliance, with strong Turkish and English communication.