Information Security Manager

Anadolu Efes; Fatih; On-site; TRY 700,000 - 1,100,000; Full time

Job summary

Anadolu Efes is seeking an Information Security Manager to lead governance, risk management, and security operations in a global beverage company. You will shape the security strategy, manage budgets, and partner with Legal, IT, and other AG companies to align policies and drive risk reduction.

You will embed secure-by-design practices across projects, cloud, and OT, while fostering a strong security culture and ensuring regulatory compliance including KVKK and GDPR.

Qualifications

• Bachelor's degree in Computer Engineering, Information Systems, Information Security, Industrial Engineering or a related field.
• Professional certifications such as CISSP, CISM, CISA or equivalent are strongly preferred.
• Minimum 10 years of experience in Information Security/Cybersecurity/IT Risk Management, incl. 5+ years in leadership.
• Proven experience in information security governance, risk management, regulatory compliance and security operations.
• Strong knowledge of security frameworks (ISO/IEC 27001, NIST), security technologies, cloud and AI security; OT security a plus.
• Ability to translate cybersecurity risks into business impact; strong communication with executives.
• Experience working in a matrix or multi‑company group structure.
• Collaborative leadership, building high‑performing teams across functions.
• Strong analytical, program and crisis management skills; calm under pressure.
• Growth mindset, curiosity and openness to new technologies.
• Excellent command of written and spoken English.

Responsibilities

• Lead information security governance, including committees and decision-making.
• Build and maintain information security strategy aligned with AG standards and ISO/NIST.
• Develop and improve the information security program and control framework.
• Lead cybersecurity risk and maturity assessments with business units; report KPIs to leadership.
• Own information security budget and AG CIO Office alignment.
• Coach and develop the information security team and build cross‑functional partnerships.
• Ensure policy ownership and regulatory compliance including KVKK, GDPR and other requirements.
• Embed security by design across projects, cloud, and OT; oversee key controls and incident readiness.
• Oversee third‑party security requirements and supplier risk with Legal and Procurement.
• Lead security culture initiatives and awareness programs; drive phishing simulations.
• Own incident response and cyber resilience aligned with business continuity.

Skills

Information security leadership

Governance

Risk management

Executive communication

Security operations

Education

Bachelor's degree in Computer Engineering / Information Security / related field

CISSP / CISM / CISA or equivalent

Tools

ISO/IEC 27001

NIST

Cloud security

AI security

Job description

Would you like to be part of Anadolu Efes?

Let's get to know each other!

At Anadolu Efes, we contribute to social and cultural development wherever we operate and enrich the moments that bring people together. While doing so, we focus on creating sustainable value and making a positive impact in the communities we serve.

Our story began in 1969, when two entrepreneurs decided to pursue their vision.

Today, we are an international beverage company reaching millions of consumers. With a heritage spanning more than half a century and an export network extending to nearly 70 countries, we continue to create value across our geographies. By production volume, we rank among the world's top 10 and Europe's top 5 brewing companies, while our flagship brand is among the most preferred brands in the Mediterranean region.

If you would like to be part of this journey, we look forward to receiving your application!

We are hiring an Information Security Manager!

What does an Information Security Manager do at Anadolu Efes?

Governance, Strategy, Risk Management and AG Alignment

• Lead information security governance, including its committees and decision‑making mechanisms,
• Develop, maintain and execute the information security and cybersecurity strategy aligned with business objectives and AG standards,
• Build and continuously improve the information security program and control framework, based on AG standards and recognized frameworks such as ISO/IEC 27001,
• Lead cybersecurity risk and maturity assessments and risk treatment together with business units,
• Report regularly to senior management on cybersecurity risks, incidents, KPIs and program maturity,
• Own the information security budget and investment plan, aligned with business priorities and the AG cybersecurity roadmap,
• Act as the Company's primary counterpart to the AG CIO Office, working closely with it and peer AG companies to align strategy, roadmap and policies, share threat intelligence and good practices, and consult early on significant decisions,
• Actively participate in AG cybersecurity committees and contribute to, or lead, joint AG initiatives,
• Report risks, KPIs and roadmap progress to the AG CIO Office in line with the AG reporting framework, and promptly elevate material incidents, significant deviations from AG standards and high‑risk exceptions.

Team Leadership and Collaboration

• Lead, coach and develop the information security team, building a collaborative, high-performance culture and future‑ready capabilities,
• Build trusted partnerships with business units, IT, Legal Affairs, Internal Audit and other AG companies, positioning information security as a business enabler.

Policies, Compliance and Regulatory Oversight

• Own the Company's Information Security Policy, aligned with AG policy and standards, including its annual review and exception management,
• Ensure policies and standards are applied consistently across the business,
• Oversee compliance with applicable cybersecurity and data protection regulations (including KVKK, GDPR and Capital Markets Board requirements) and ensure timely regulatory notification of incidents and data breaches, together with Legal Affairs and the data privacy function.

Security Architecture, Projects and Technology Enablement

• Embed security by design across projects, applications, cloud and digital initiatives, including secure development practices,
• Act as a trusted advisor on new technologies, cloud and AI solutions, providing guidance and pre‑deployment reviews.
• Oversee security operations and key technical controls, such as monitoring, vulnerability and access management, leveraging automation and AI where appropriate,
• Set and oversee security requirements for production and operational technology (OT) systems, together with Operations and Technical teams,
• Agree pragmatic, risk‑based solutions with business and project owners; elevate unacceptable risks to senior management and, if necessary, recommend delaying go‑live until critical risks are resolved or formally accepted.

Third‑Party and Supply Chain Security

• Ensure supplier and cloud contracts include appropriate security and data protection requirements, together with Legal Affairs and Procurement,
• Assess and monitor third‑party security risks and drive mitigation, using AG‑level assessments where available.

Security Culture and Awareness

• Lead the Security Champion Program and awareness, training and phishing simulation programs, aligned with AG‑wide initiatives,
• Build a positive security culture in which employees take ownership of security, with measurable improvement in behavior.

Incident Management and Cyber Resilience

• Own the cybersecurity incident response process and lead the response to incidents, with operational execution by IT and SOC teams,
• Define cyber resilience and recovery requirements in line with business continuity objectives, and support crisis management during major incidents.

What are the qualifications we look for in an Information Security Manager at Anadolu Efes?

• Bachelor's degree in Computer Engineering, Information Systems, Information Security, Industrial Engineering or a related field,
• Professional certifications such as CISSP, CISM, CISA or equivalent are strongly preferred,
• Minimum 10 years of experience in Information Security, Cybersecurity, IT Risk Management or related disciplines, including at least 5 years in a leadership or management role,
• Proven experience in information security governance, risk management, regulatory compliance and security operations.
• Strong knowledge of security frameworks (e.g., ISO/IEC 27001, NIST), security technologies, cloud and AI security, and relevant regulations; OT security experience is a plus,
• Ability to translate cybersecurity risks into business impact, with strong communication, stakeholder management and influencing skills at executive level,
• Experience working in a matrix or multi‑company group structure,
• Collaborative leadership style, with a track record of building high‑performing teams and working as a team player across functions,
• Strong analytical, program and crisis management skills; calm and decisive under pressure,
• Growth mindset, curiosity and openness to new technologies and ways of working,
• Excellent command of written and spoken English.

What can you expect from Anadolu Efes?

At Anadolu Efes, you'll have the opportunity to build your career in an organization that draws strength from its heritage while embracing the future. As we take our brands beyond borders, we foster a culture of collaboration, continuous learning, and shared success. We value different perspectives and empower our people to take initiative, grow professionally, and create meaningful impact.

How do we recruit?

We believe that diversity and inclusion strengthen our business. Therefore, all candidates are evaluated based on equal opportunity principles, regardless of language, religion, race, age, ethnic origin, gender, gender identity, or sexual orientation. Our recruitment processes are conducted in a fair and transparent manner through objective assessment tools, role-specific criteria, and competency-based interviews.

If you believe this opportunity is the right fit for you...

We look forward to receiving your application and exploring how you can contribute to our continued success.

You can access the Anadolu Efes Employee Candidate Disclosure Statement through the link below:

https://anadoluefes.com.tr/calisan-adayi-aydinlatma-metni.pdf