Cyber Security Specialist

Gülermak Heavy Industries Construction & Contracting Co. Inc; Çankaya; On-site; TRY 60,000 - 80,000; Full time

Job summary

A leading construction and contracting company in Turkey is seeking a Cybersecurity Specialist to oversee global IT security operations. The role involves developing policies, monitoring incidents, and enhancing security posture across the organization. The ideal candidate will have a Bachelor's degree in Cybersecurity and at least 4 years of relevant experience, along with strong knowledge of cybersecurity tools and frameworks.

Qualifications

• Minimum 4 years of experience in cybersecurity roles.
• Hands-on experience with SIEM, IDS/IPS, and endpoint protection.
• Proficiency in managing security solutions like Azure and firewalls.

Responsibilities

• Coordinate with cybersecurity vendors for protection and compliance.
• Monitor and report security incidents to management.
• Lead incident response and conduct risk assessments.

Skills

Cybersecurity knowledge

Incident response

Vulnerability management

Strong communication skills

Analytical mindset

Education

Bachelor’s degree in Cybersecurity or related field

Tools

Microsoft Security Center

SIEM

Firewall management

Job description

Role Purpose

The Cybersecurity Specialist is responsible for leading and coordinating Gülermak’s global IT security operations in close collaboration with cybersecurity vendors. This role ensures the development, implementation, and enforcement of corporate security policies and procedures across all environments.

The position includes continuous monitoring and response to security incidents, execution of internal audits and penetration tests, and maintaining compliance with international standards and regulatory frameworks. The specialist will also be accountable for designing and maintaining secure configurations across IT networks, infrastructure, applications, and devices.

In addition to technical responsibilities, the role involves driving company-wide security awareness initiatives and working cross-functionally with internal teams and external partners to strengthen Gülermak’s overall security posture.

Key Responsibilities

• Coordinate with cybersecurity vendors to ensure continuous protection
• Develop, update, and enforce corporate cybersecurity policies and procedures
• Monitor, analyze, and report on security incidents to senior management
• Plan and execute penetration tests and internal security audits
• Proactively monitor cyber threats and implement preventive measures
• Lead incident response and forensic investigations in case of breaches
• Conduct risk assessments and vulnerability management
• Develop mitigation plans and track remediation efforts
• Ensure compliance with KVKK, GDPR, HIPAA, NIST, ISO 27001 and similar frameworks
• Manage and optimize security solutions including Azure Security, M365 Security, firewalls, and endpoint protection
• Experience in configuration of IT network, infrastructure, applications, and devices in secure environments
• Maintain documentation for disaster recovery and business continuity
• Organize -plan & execute- security awareness programs for employees and promote a culture of security across departments
• Stay up to date with emerging threats, vulnerabilities, and best practices

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field
• Minimum 4 years of experience in cybersecurity roles
• Strong knowledge of Microsoft, Linux, ERP systems, M365, Azure, and network security
• Hands-on experience with SIEM, IDS/IPS, firewall management, and endpoint protection
• Familiarity with regulatory frameworks (KVKK, GDPR, HIPAA, NIST, ISO 27001)
• Experience in threat detection, incident response, and vulnerability remediation
• Proficiency in Azure Security Center (Microsoft Defender for Cloud), Microsoft Defender, and related tools
• Preferred certifications: CIS, CISSP, CISM, CEH, CompTIA Security+, Microsoft Security certifications: SC900, SC-200
• Strong communication and coordination skills
• Ability to translate technical risks into business language for non-technical stakeholders
• Proactive, analytical, and detail-oriented mindset