Information Security Strategy & Governance Engineer

Garanti BBVA; Turkey; Hybrid; TRY 420,000 - 600,000; Full time

Job summary

Garanti BBVA Technology is seeking an Information Security Management - Security Engineer to define, own, and deliver the information security strategy in line with business objectives.

You will govern security controls and policies, ensure regulatory compliance, assess cloud and data security needs, coordinate awareness trainings, and collaborate with local and global teams across Istanbul and Ankara offices.

Qualifications

• BS in Computer Engineering, Electrical and Electronics Engineering or equivalent disciplines
• At least 6 years hands-on experience in information and infrastructure security
• Experience designing and reviewing security controls and solutions
• Knowledge of information security governance models and regulatory requirements (BDDK, COBIT, SOX, PCI DSS, KVKK, ISO27001)
• Knowledge of TCP/IP, networking concepts and infrastructure hardening
• Familiarity with firewall, WAF, DDoS, DNS, NAC, Proxy, switches/routers
• Understanding of cloud security principles and architectures
• Awareness of AI/GenAI security risks, model risk and RAG/Vector DB security
• Related certifications (CISA, CISM, CISSP, ISO27001, TOGAF) preferred

Responsibilities

• Define, own, deliver and continuously improve the Information Security strategy
• Ensure compliance with information security regulations and monitor internal processes
• Determine security needs of data, cloud and infrastructure projects
• Own internal security policies and procedures for regulatory compliance
• Coordinate information security awareness trainings within the organization
• Keep up-to-date with technology security updates and implement measures for Garanti BBVA
• Design and review security controls and solutions

Skills

Security governance

Networking concepts

Security controls

Cloud security principles

AI security awareness

Regulatory knowledge

Threat modeling

Policy development

Education

BS in Computer Engineering or Electrical & Electronics Engineering

Job description

Garanti BBVA Technology is seeking an Information Security Management - Security Engineer to define, own, and deliver the information security strategy in line with business objectives.

You will govern security controls and policies, ensure regulatory compliance, assess cloud and data security needs, coordinate awareness trainings, and collaborate with local and global teams across Istanbul and Ankara offices.