Information Security Unit Lead

AXA Türkiye; Fatih; On-site; TRY 600,000 - 800,000; Full time

Benefits offered by this job

Performance‑Based Bonus

Private Pension System

Share Purchase Program

Private Health Insurance

Life Insurance

Family health coverage

Transportation support

Meal Card

Flexible Benefits Program

AXA Competency Academy

Job summary

AXA Türkiye is seeking a senior information security leader to shape and evolve the corporate information security strategy in alignment with business objectives. The role involves governance, regulatory compliance (ISO 27001, PCI-DSS, KVKK, GDPR) and overseeing audit processes with proactive risk monitoring.

Ideal candidate will have 5+ years in information security, strong stakeholder management, and relevant certifications (CISSP/CISM/CISA/ISO 27001 Lead Auditor).

Qualifications

• Bachelor's degree in a related field such as MIS, CE, SE, IE or E&E.
• Minimum 5 years in information security, IT risk, internal control or audit functions.
• Solid knowledge of cybersecurity risks, security architectures, IAM, network security, and security operations.
• Certifications such as CISSP, CISM, CISA and/or ISO 27001 Lead Auditor/Lead Implementer are preferred.
• Strong analytical thinking, problem solving and stakeholder management.
• Excellent planning and organizational abilities.
• Hands‑on experience with DLP and vulnerability scanners.
• Ability to follow English-language resources and communicate professionally in English.

Responsibilities

• Shape and evolve the corporate information security strategy aligned with business objectives.
• Contribute to security governance frameworks and decision-making processes.
• Ensure sustainable compliance with ISO 27001, PCI-DSS.
• Drive implementation and oversight of security requirements related to KVKK, GDPR and other regulatory frameworks.
• Manage audit processes and remediation of findings.
• Maintain communication with executive management and governance committees.
• Lead vulnerability management and security risk monitoring; report security metrics.

Skills

Information security governance

Stakeholder management

English communication

Vulnerability management

Security operations

DLP tools

Security risk monitoring

Analytical thinking

Education

Bachelor's degree in MIS/CE/SE/IE/EE

Tools

ISO 27001 Lead Auditor/Lead Implementer

PCI-DSS

Job description

About AXA Türkiye

AXA is a leading insurance company serving 93 million customers in 51 countries. AXA Türkiye embraces the group’s mission of acting for human progress by protecting what matters, fostering a culture of innovation, courage, and development. The employee experience journey focuses on talent management and a personalized, inclusive workplace.

Qualifications

• Bachelor's degree in Management Information Systems, Computer Engineering, Software Engineering, Industrial Engineering, Electrical & Electronics Engineering, or a related field
• Minimum 5 years of experience in Information Security, Information Technology, IT Risk Management, Internal Control, and Audit functions
• Solid knowledge of cybersecurity risks, security architectures, identity and access management, network security, and security operations
• Preferably holding one or more of the following certifications: CISSP, CISM, CISA, and/or ISO 27001 Lead Auditor/Lead Implementer
• Strong analytical thinking, problem‑solving, and stakeholder management skills
• Excellent planning and organizational abilities
• Hands‑on experience with Data Loss Prevention (DLP) and vulnerability scanning tools
• Ability to effectively follow English-language resources and communicate professionally in an English‑speaking business environment
• Strong influencing and persuasion skills, with the ability to manage resistance and drive alignment across stakeholders

Responsibilities

• Shape and evolve the corporate information security strategy in alignment with business objectives
• Actively contribute to security governance frameworks and decision‑making processes
• Ensure the sustainable compliance of security practices with international standards such as ISO 27001 and PCI‑DSS
• Drive the implementation and oversight of security requirements related to KVKK, GDPR, and other relevant regulatory frameworks
• Manage audit processes and ensure timely remediation of findings in line with business priorities
• Maintain active communication with executive management and governance committees on information security matters
• Lead vulnerability management and security risk monitoring processes, and regularly report security metrics and performance indicators
• Assess security requirements and risks throughout project lifecycles, ensuring appropriate controls are embedded from the outset

Benefits

• Performance‑Based Bonus
• Employer‑Contributed Private Pension System
• Employee Discounted Share Purchase Program (Shareplan)
• Private Health Insurance including psychological support coverage
• Life Insurance
• Supplementary Health Insurance for spouses and children
• Discounted OSS and TSS for mothers and fathers
• Discounted auto, home, and personal accident insurance
• Transportation support or shuttle
• Meal Card
• “Your Choice” Flexible Benefits Program
• AXA Competency Academy (AYA)