Cyber Security and Network Director

Yıldız Tech; Üsküdar; On-site; TRY 800,000 - 1,200,000; Full time

Job summary

Yıldız Tech is seeking a Cyber Security and Network Director to lead enterprise cyber security and network initiatives across the holding group. The role focuses on secure network design, OT/ICS security, risk management, and incident response across multiple sites, including manufacturing environments, with emphasis on safety and production continuity.

You will collaborate with IT, engineering, and business units to implement robust security controls, governance, and budgeting for security

Job description

The story of Yıldız Holding, which started with biscuit production in Istanbul in 1944, continues today with our food-snack products that we have reached 4 billion people in 5 continents with more than 300 brands and with our retail companies all over Turkey. With our 80 thousand employees, the majority of whom are located in Turkey, we aim to reach the better without stopping, and we produce a wide range of products from biscuits to chocolate, from frozen food to packaging in a total of 45 factories, 20 of which are abroad. We always raise the bar in economic contribution, employment, exports, social solidarity and sustainability. We give priority to social contribution with the principle of "Make Happy Be Happy" and we have been producing happiness for more than 80 years with our products, services and sustainable social responsibility understanding.

Our company Yıldız Tech, established to support the software development journeys of our digital applications within our group and to create innovative solutions, aims to enable our customers operating in the e-commerce sector to make the most of next-generation technologies, achieve success through digital and analytical solutions, and capitalize on emerging opportunities to attain sustainable benefits.

If you want to be a part of this global world with us, apply for the position of Cyber Security and Network Director and join us.

What Awaits You, What Will Be Your Responsibilities?

• Minimum of 12 years of experience in cyber security and network management.
• Lead the technical cyber security and network management functions across Yıldız Holding, protecting information assets and technologies through effective security controls, risk mitigation measures, and security technology investments.
• Lead the design, implementation, and continuous improvement of enterprise network architectures, ensuring secure, reliable, and scalable connectivity across Yıldız Holding and its group companies.
• Lead the development and execution of the Operational Technology (OT) network and cybersecurity strategy across manufacturing sites, in collaboration with plant management, engineering, automation, and IT teams, prioritizing personnel safety, production continuity, and operational resilience.
• Oversee the design, standardization, and lifecycle management of industrial network architectures, including IT/OT segmentation, industrial DMZs, secure connectivity between sites, and controlled remote access for vendors and maintenance teams.
• Direct cybersecurity and network initiatives, providing technical guidance to infrastructure and application development teams on secure network design, system architectures, and security controls.
• Identify, assess, and manage security vulnerabilities and their business impact; design and implement appropriate controls to address unacceptable risks and evolving security needs.
• Establish and maintain visibility of OT assets and network communications; lead OT risk assessments, vulnerability management, and remediation planning, taking into account legacy systems, vendor requirements, and approved production maintenance windows.
• Lead security incident response planning and investigations, act as the escalation point for significant security issues, and oversee incident reporting, remediation, and follow-up actions.
• Integrate OT security monitoring and incident response into enterprise security operations, and coordinate plant-specific response and recovery plans and exercises with manufacturing teams to minimize production disruption.
• Coordinate internal teams, external resources, and service providers to deliver security initiatives, ensuring effective resource allocation and collaboration across the organization.
• Plan security investments, estimate costs, determine budgets, and manage project scope, communications, risks, procurement, and vendor relationships.
• Review the security aspects of business cases, project proposals, business requirements, and internal and third-party solution designs and system architectures.
• Define and oversee OT security requirements for new production lines, industrial automation projects, and third-party integrations, embedding appropriate controls into design, procurement, commissioning, and change management processes.
• Provide internal consultancy to IT and business stakeholders, chair information security meetings, and translate security requirements into practical recommendations.
• Support the establishment, implementation, and ongoing compliance of information security policies and procedures, while continuously improving security management processes.
• Work with internal and external auditors to document security controls, demonstrate compliance, and ensure security administration responsibilities are properly fulfilled.
• Support data protection and privacy compliance, monitor relevant regulatory developments, and maintain up-to-date knowledge of security practices and technologies.
• Oversee the investigation of security breaches, including forensic and evidential considerations, and support related disciplinary and legal processes.

What Will Be the Qualifications We Expect from You?

• Strong technical knowledge of enterprise networks and systems, including Windows & Linux servers, network vulnerabilities, and prevention methods.
• In-depth knowledge of networking protocols and technologies, including MPLS, LAN, Wi-Fi, and voice and video communications.
• Proven experience in managing and securing OT/ICS environments and industrial networks within manufacturing organizations, preferably across multiple production sites.
• Experience in internet, network, and application security, including authentication, identity management, and penetration testing technologies.
• Broad understanding of advanced network and security protocols, software and security architectures, and secure network design principles.
• Hands-on understanding of industrial network segmentation, security zones and conduits, industrial firewalls, OT asset discovery and monitoring, and secure third-party remote access.
• Proven experience in information security risk assessments, audit processes, and compliance with recognized industry standards, including the development and maintenance of security policies.
• Knowledge of information security regulations, data protection and privacy requirements, and IT control frameworks such as COBIT and ITIL.
• Working knowledge of forensic investigations, security incident response, and evidential requirements.
• Experience in OT vulnerability assessment, incident response, and recovery planning, with an understanding of the constraints associated with legacy equipment, safety-critical systems, and continuous production.
• Knowledge of enterprise ERP platforms such as SAP, microservices, containers, Kubernetes, and cloud systems.
• Strong experience with Microsoft technologies, including Windows, SQL Server, Exchange, and Microsoft 365.
• Programming knowledge and strong project management capabilities, including budget, resource, procurement, and vendor management.
• Proven leadership and people management capabilities across geographies and cultures.

Which Skills Will Be Featuring You?

• Strategic, big-picture thinking with the ability to translate business priorities into a clear cybersecurity and network security direction.
• Strong analytical thinking and attention to detail when assessing vulnerabilities, security risks, and complex technical issues.
• Effective written and verbal communication skills, with the ability to explain technical security matters clearly to IT, business, and senior stakeholders.
• Collaborative leadership and the ability to coordinate diverse teams, internal stakeholders, and external partners across geographies and cultures.
• Ability to build effective partnerships between IT, cybersecurity, engineering, automation, and plant operations teams, establishing clear ownership and shared priorities for OT network reliability and security.
• Strong conflict resolution skills and sound judgment when balancing security requirements, business needs, and competing priorities.
• Sound judgment in balancing cybersecurity risk, personnel safety, production availability, and the operational constraints of manufacturing environments.
• The ability to lead decisively under pressure, manage high-stress situations, and maintain focus during critical security incidents.