Information Security & Risk Analyst

Mavi; Fatih; On-site; TRY 300,000 - 420,000; Full time

Job summary

Mavi, established in 1991 in Istanbul, seeks an Information Security Associate in the Information Technology Department to strengthen vendor risk management and ISMS governance. You will drive ISO 27001:2022 alignment, audits, and privacy controls, coordinating with stakeholders across the organization to reinforce data protection.

Strong analytical and communication skills are essential as you report risks, audit findings, and KPIs while supporting continual security improvements.

Qualifications

• Bachelor's degree in Information Security, MIS, Engineering, CS, or related field
• Minimum 3 years of experience in information security, IT audit, risk management, or governance functions
• Knowledge of Information Security Management Systems and ISO 27001:2022 standards
• Familiarity with KVKK requirements and data protection processes
• Experience in vendor and third-party risk management practices
• Hands-on involvement in audit, compliance, and risk assessment activities
• Strong analytical thinking, problem-solving, and reporting skills
• Excellent communication and stakeholder management skills across teams
• Proficiency in Microsoft Office applications and AI-powered tools
• Good command of English
• Strong digital and AI literacy to improve processes

Responsibilities

• Manage third-party and vendor security processes by conducting security assessments and evaluating potential risks
• Plan, execute, and follow up on vendor security audits and remediation activities
• Contribute to ISMS policies, procedures, and standards
• Coordinate internal audit, certification, and compliance activities per ISO 27001:2022
• Support enterprise information security risk management processes by identifying, assessing, and monitoring risks
• Support data protection compliance initiatives and privacy controls implementation
• Coordinate audit prep related to information systems governance and regulatory requirements
• Assess security controls of cloud services and third-party providers
• Collaborate with stakeholders during vendor security incidents and data breach management
• Prepare regular reports on information security risks, audit findings, and KPIs
• Contribute to information security awareness and culture-building across the organization

Skills

Analytical thinking

Problem-solving

Reporting skills

Communication skills

Stakeholder management

English proficiency

Education

Bachelor's degree in Information Security or related field

Tools

Microsoft Office

AI-powered tools

Job description

Mavi, established in 1991 in Istanbul, seeks an Information Security Associate in the Information Technology Department to strengthen vendor risk management and ISMS governance. You will drive ISO 27001:2022 alignment, audits, and privacy controls, coordinating with stakeholders across the organization to reinforce data protection.

Strong analytical and communication skills are essential as you report risks, audit findings, and KPIs while supporting continual security improvements.