Information Security Management - Security Engineer

Garanti BBVA; Turkey; Hybrid; TRY 420,000 - 600,000; Full time

Job summary

Garanti BBVA Technology is seeking an Information Security Management - Security Engineer to define, own, and deliver the information security strategy in line with business objectives.

You will govern security controls and policies, ensure regulatory compliance, assess cloud and data security needs, coordinate awareness trainings, and collaborate with local and global teams across Istanbul and Ankara offices.

Qualifications

• BS in Computer Engineering, Electrical and Electronics Engineering or equivalent disciplines
• At least 6 years hands-on experience in information and infrastructure security
• Experience designing and reviewing security controls and solutions
• Knowledge of information security governance models and regulatory requirements (BDDK, COBIT, SOX, PCI DSS, KVKK, ISO27001)
• Knowledge of TCP/IP, networking concepts and infrastructure hardening
• Familiarity with firewall, WAF, DDoS, DNS, NAC, Proxy, switches/routers
• Understanding of cloud security principles and architectures
• Awareness of AI/GenAI security risks, model risk and RAG/Vector DB security
• Related certifications (CISA, CISM, CISSP, ISO27001, TOGAF) preferred

Responsibilities

• Define, own, deliver and continuously improve the Information Security strategy
• Ensure compliance with information security regulations and monitor internal processes
• Determine security needs of data, cloud and infrastructure projects
• Own internal security policies and procedures for regulatory compliance
• Coordinate information security awareness trainings within the organization
• Keep up-to-date with technology security updates and implement measures for Garanti BBVA
• Design and review security controls and solutions

Skills

Security governance

Networking concepts

Security controls

Cloud security principles

AI security awareness

Regulatory knowledge

Threat modeling

Policy development

Education

BS in Computer Engineering or Electrical & Electronics Engineering

Job description

Information Security Management - Security Engineer

Corporate Information Security teamworks passionately to shape the technologies of the future.

They value being a team, learning from each other and producing together. Since they are excellent teammates, they are proficient in positive interpersonal communication, taking responsibility and valuing different ideas.

They are creative and productive. Their business is based on innovation and is only limited by their dreams. Now they are looking for new teammates with whom they will achieve together.

In that team;

• Define, own, deliver and continuously improve the Information Security strategy for Garanti BBVA, in line with business objectives
• Compliance with information security regulation and monitoring of internal processes
• Determining the security needs of data, cloud and infrastructure projects
• Business owner of creating and maintaining internal security processes, policies and procedures for regulatory and industry compliance
• Compliance follow-up with the BBVA group
• Governance of affiliates and third party needs
• Coordinating Information security awareness trainings within the organization
• Following the updates about technology security and participating in active studies about the measures to be taken in Garanti BBVA.
• Designing and reviewing security controls and solutions

How are we looking for someone for this team?

We have a passion for technology, we think big and we continuously explore and seek improvement, we trust the power of empowerment. We are an academy for talents. Thus, we are “one team” and we always achieve together.

The place we call “our office” has no boundaries. We stand for a positive team culture, shared and lived together anywhere.

So, what awaits you Garanti BBVA Technology?

• A buddy who will guide and accompany you during your onboarding process,
• Career development opportunities on a well-defined career path,
• Local and global career opportunities,
• A great number of online courses and technical trainings (Kampüs Garanti BBVA, Coursera, Linkedin etc.) that will support you throughout your development,
• A personalized development plan for you,
• Birthday off day,
• Private health and life insurance,
• Practice classes in English and Spanish,
• Discount on master programs,
• Sabbatical leave granted for every seven years at Garanti BBVA Technology.

In addition to all of these, we’re also meeting our teammates in person within regular intervals or whenever we miss each other either in our İstanbul or Ankara offices, which are always full of social opportunities and sportive activities.

The mandatory criteria we are looking for

• BS in Computer Engineering, Electrical and Electronics Engineering or equivalent disciplines
• Preferably having at least 6 years of hands-on experience information and infrastructure security
• Experience on designing and reviewing security controls and solutions
• Knowledge information Security governance model
• Knowledge and understanding of relevant legal and regulatory requirements BDDK, COBIT, SOX, PCI DSS, KVKK, ISO27001
• Knowledge of TCP/IP and networking concepts
• Knowledge of infrastructure hardening processes
• Knowledge of firewall, waf, ddos, dns, nac, Proxy, switch, router etc
• Knowledge and understanding of awareness concept
• Knowledge cloud Security principles&architectures and Security best practices
• Knowledge AI, GenAI & LLM Architecture, AI Security risk&controls, model &RAG&Vector DB etc. security

The preferably criteria we are looking for

• Preferably having related certifications ( CISA,CISM, CISSP, ISO27001, TOGAF etc.)