Information Security Associate

Mavi; Fatih; On-site; TRY 300,000 - 420,000; Full time

Job summary

Mavi, established in 1991 in Istanbul, seeks an Information Security Associate in the Information Technology Department to strengthen vendor risk management and ISMS governance. You will drive ISO 27001:2022 alignment, audits, and privacy controls, coordinating with stakeholders across the organization to reinforce data protection.

Strong analytical and communication skills are essential as you report risks, audit findings, and KPIs while supporting continual security improvements.

Qualifications

• Bachelor's degree in Information Security, MIS, Engineering, CS, or related field
• Minimum 3 years of experience in information security, IT audit, risk management, or governance functions
• Knowledge of Information Security Management Systems and ISO 27001:2022 standards
• Familiarity with KVKK requirements and data protection processes
• Experience in vendor and third-party risk management practices
• Hands-on involvement in audit, compliance, and risk assessment activities
• Strong analytical thinking, problem-solving, and reporting skills
• Excellent communication and stakeholder management skills across teams
• Proficiency in Microsoft Office applications and AI-powered tools
• Good command of English
• Strong digital and AI literacy to improve processes

Responsibilities

• Manage third-party and vendor security processes by conducting security assessments and evaluating potential risks
• Plan, execute, and follow up on vendor security audits and remediation activities
• Contribute to ISMS policies, procedures, and standards
• Coordinate internal audit, certification, and compliance activities per ISO 27001:2022
• Support enterprise information security risk management processes by identifying, assessing, and monitoring risks
• Support data protection compliance initiatives and privacy controls implementation
• Coordinate audit prep related to information systems governance and regulatory requirements
• Assess security controls of cloud services and third-party providers
• Collaborate with stakeholders during vendor security incidents and data breach management
• Prepare regular reports on information security risks, audit findings, and KPIs
• Contribute to information security awareness and culture-building across the organization

Skills

Analytical thinking

Problem-solving

Reporting skills

Communication skills

Stakeholder management

English proficiency

Education

Bachelor's degree in Information Security or related field

Tools

Microsoft Office

AI-powered tools

Job description

Are you ready to be a part of this journey?

Mavi, incorporated in 1991 in Istanbul, is recognized as a highly successful global lifestyle brand, rooted in 34 years of denim expertise. Mavi has been publicly traded since 2017 and has a presence in 34 countries, including Turkiye, the USA, Canada, Germany, and Russia, selling its products through approximately ~4,000 points, including 498 Mavi shops.

Mavi's trusted brand image translates into high quality and strong pricing power with products positioned between the upper end of the core and the premium segments of the ready-to-wear market. Perfect Fit philosophy guides Mavi in designing jeans that perfectly fit its customers' lifestyles, body types, and quality expectations. Mavi ranks among the world's leading premium denim brands and stands apart as the preferred lifestyle brand across female and male consumer segments.

We are looking for an Information Security Associate to join our Information Technology Department.

What will be expected of you in this role?

• Manage third-party and vendor security processes by conducting security assessments and evaluating potential risks,
• Plan, execute, and follow up on vendor security audits and remediation activities,
• Contribute to the development, maintenance, and continuous improvement of Information Security Management System (ISMS) policies, procedures, and standards,
• Coordinate internal audit, certification, and compliance activities in line with ISO 27001:2022 requirements,
• Support enterprise information security risk management processes by identifying, assessing, and monitoring risks and mitigation plans,
• Support compliance initiatives related to data protection regulations and ensure the effective implementation of privacy controls,
• Coordinate audit preparation activities related to information systems governance and regulatory compliance requirements,
• Assess security controls of cloud services and third-party service providers,
• Collaborate with relevant stakeholders during vendor-related security incidents and data breach management processes,
• Prepare regular reports on information security risks, audit findings, compliance status, and key performance indicators,
• Contribute to information security awareness and culture-building initiatives across the organization.

Why you?

• Bachelor's degree in Information Security, Management Information Systems, Engineering, Computer Science, or a related field,
• Minimum 3 years of experience in information security, IT audit, risk management, or governance functions,
• Knowledge and hands-on experience in Information Security Management Systems and ISO 27001:2022 standards,
• Familiarity with KVKK requirements and data protection processes,
• Experience in vendor and third-party risk management practices,
• Hands-on involvement in audit, compliance, and risk assessment activities,
• Strong analytical thinking, problem-solving, and reporting skills,
• Excellent communication and stakeholder management skills with the ability to collaborate effectively across multiple teams,
• Proficiency in Microsoft Office applications and AI-powered tools,
• Good command of English,
• Strong digital and AI literacy with a willingness to leverage emerging technologies to improve business processes and efficiency.

Nice to have

• Professional certifications such as ISO 27001 Lead Auditor, CISA, CISM, CRISC, or similar credentials,
• Experience in publicly listed companies or highly regulated industries,
• Experience within retail, e-commerce, or multi-location business environments,

You might be the team member we are looking for!

*Driven by our "All Blue. All Better. For All." strategy and empowered by our people-centric Mavi culture, we create a work environment where human rights are respected and diversity and differences are embraced. We promote gender equality and commit to equal opportunity in all our recruitment processes.

In line with our Diversity and Inclusion Policy, we select and recruit employees based on their professional competencies and qualifications, regardless of their age, gender, sexual orientation, race, skin color, language, religious belief, spiritual and political ideology, ethnicity, economic status and health condition, disability, physical appearance, lifestyle and what they wear and support them in unlocking their potential.