Information Security Manager

Getir; Fatih; On-site; TRY 300,000 - 400,000; Full time

Job summary

A leading company in ultra-fast delivery is seeking an Information Security Manager to take charge of its security strategy and compliance. The ideal candidate will leverage their extensive experience in cybersecurity to enhance organizational security, managing vendor assessments and organizing internal trainings to foster a culture of security awareness.

Qualifications

• At least 5 years of experience in Red Team, Blue Team, and GRC.
• Strong knowledge of PCI DSS, ISO 27001 and security standards.
• Preferably holding certifications like CISSP, CISM, OSCP, CEH.

Responsibilities

• Develop and implement the company's information security strategy.
• Coordinate Red Team and Blue Team activities.
• Manage compliance processes and conduct audits.

Skills

Analytical thinking

Problem-solving

Crisis management

Education

Bachelor's or Master's degree in Information Security, Computer Engineering

Tools

SIEM

Firewall

EDR

DLP

CASB

Job description

About the job Information Security Manager

Getir is the pioneer of ultra-fast delivery. By bringing together great technology with a unique operational model, we were the first to introduce the concept of groceries being delivered to your door in minutes.

Great technology is developed by great people, and thats why were looking for talented technologists to join our team.

Responsibilities

• Develop and implement the company's information security strategy,
• Coordinate Red Team and Blue Team activities and develop effective defense mechanisms against security threats,
• Manage compliance processes and conduct audits within the scope of PCI DSS, ISO 27001, and relevant regulations.
• Manage the cybersecurity incident response process and improve incident management procedures,
• Organize internal training sessions to enhance security awareness,
• Keep track of security technologies and threat trends to implement best practices within the company,
• Manage vendor security assessments and third-party risk management processes.

Qualifications

• Bachelor's or Master's degree in Information Security, Computer Engineering, or a related field,
• At least 5 years of experience in Red Team, Blue Team, and GRC (Governance, Risk, Compliance),
• Strong knowledge of PCI DSS, ISO 27001, and other security standards,
• Familiarity with cybersecurity threats, attack techniques, and defense methods,
• Experience with security tools and technologies (SIEM, Firewall, EDR, DLP, CASB, etc.),
• Ability to manage audit and compliance processes,
• Strong analytical thinking, problem-solving, and crisis management skills,
• Preferably holding security certifications such as CISSP, CISM, OSCP, CEH, or similar.