Information Security and IT Governance Assistant Manager

Zurich Insurance; Fatih; On-site; TRY 600,000 - 800,000; Full time

Job summary

Zurich Insurance in Istanbul seeks an experienced IT Security professional to oversee risk management and ISMS governance on security-first digital initiatives. You will lead incident response, access governance, and security consulting across international teams, applying agile and methodical approaches to safeguard information assets and ensure regulatory compliance.

The role requires strong communication and cross-functional collaboration.

Qualifications

• Degree in business administration, computer science, business informatics or comparable qualifications.
• Minimum 5 years' experience in IT Security and IS Risk assessment procedures.
• Certification as ISO 27001 LA auditor, CISSP, CISM or comparable.
• Experience in setup, rollout and management of Information Security and/or Risk Management Systems.
• Sound knowledge of the interaction between the Governance-Risk-Compliance processes for Information Security.
• Fluency in spoken and written English and local language.
• Ability to communicate effectively in an international environment.
• Team focus, motivation, and enthusiasm.
• Strong analytical and methodical competence.
• Project management skills Agile mindset.

Responsibilities

• Manage information security risks and mitigation measures.
• Monitors the ISMS effectiveness and the implementation of defined information security measures.
• Drives the design, implementation, and operation of digital solutions in accordance with the “secure / privacy by design” principles.
• Manages security-related incidents.
• Governs the identity, access, and rights management framework for the company.
• Drives the information security governance framework.
• Manages internal security consulting.
• Works in accordance with the company's procedures, instructions, and Occupational Safety rules.

Skills

5+ years IT Security experience

English and local language fluency

Analytical & methodical thinking

Project management (Agile)

Team oriented & proactive

Education

Degree in business administration, computer science, business informatics or comparable qualifications.

Tools

ISO 27001 LA auditor

Job description

Key Responsibilities

• Manage information security risks and mitigation measures.
• Monitors the ISMS effectiveness and the implementation of defined information security measures.
• Drives the design, implementation, and operation of digital solutions in accordance with the “secure / privacy by design” principles.
• Manages security-related incidents.
• Governs the identity, access, and rights management framework for the company.
• Drives the information security governance framework.
• Manages internal security consulting.
• Works in accordance with the company's procedures, instructions, and Occupational Safety rules.

Qualifications

• Degree in business administration, computer science, business informatics or comparable qualifications.
• Minimum 5 years' experience in IT Security and IS Risk assessment procedures.
• Certification as ISO 27001 LA auditor, CISSP, CISM or comparable.
• Experience in setup, roll-out and management of Information Security and/or Risk Management Systems.
• Sound knowledge of the interaction between the Governance-Risk-Compliance processes for Information Security.
• Fluency in spoken and written: English and local language.
• Ability to communicate effectively in an international environment.
• Team focus, motivation, and enthusiasm.
• Strong analytical and methodical competence.
• Project management skills Agile mindset.