IT Auditor

RÖNESANS HOLDİNG; Çankaya; On-site; TRY 180,000 - 300,000; Full time

Job summary

Ronesans Holding seeks an IT Auditor in Ankara to join the Internal Audit Department. The role focuses on IT governance, security controls, and risk assessment across systems including S4HANA and Ariba.

The candidate will provide independent assurance on IT infrastructure and applications, report findings to the Audit Committee, and contribute to the annual internal audit plan. Fluent English is mandatory.

Qualifications

• Bachelor's degree in a technical field from a reputable university.
• 2–5 years of hands-on experience in IT security, technical IT auditing, security assessments, or penetration testing.
• Experience with SAP and Ariba is highly preferred.
• Globally recognized certifications such as CISA, CISSP, CISM, CRISC, or equivalent are desirable.
• Advanced written and spoken English (mandatory).

Responsibilities

• Provide independent and objective assurance on the design and operation of the Group's IT infrastructure, systems (including S4HANA and Ariba), applications, and processes.
• Conduct IT risk assessments and security control evaluations; deliver actionable recommendations to strengthen cybersecurity posture.
• Track audit findings, remediation actions, and report status to senior management and Audit Committee.
• Contribute to annual risk-based internal audit planning and IT risk universe maintenance.
• Participate in major IT projects and digital transformation initiatives as a risk advisor.

Skills

IT auditing

IT security

Penetration testing

SAP

Ariba

English (mandatory)

Education

Bachelor's degree in computer engineering / electrical/electronics engineering / MIS

Job description

\"Ronesans Holding is among the signatories of the UN Global Compact, which calls on companies to align their strategies and operations with the principles of universal human rights, labor, environment, anti-corruption, and adopts principles based on universally accepted statements within the framework of the United Nations Global Compact.\"

\"Ronesans Holding is an employer that aims to ensure equality in human resources practices by observing transparent and ethical values without compromising its main principles of honesty, competitiveness and innovation. All applications are evaluated according to equal opportunity regardless of gender, language, religion, race and ethnicity. Discrimination cannot be tolerated.\"

We are seeking for IT Auditor to be evaluated in our Internal Audit Department in Ankara with the following qualifications;

• Bachelor’s degree in computer engineering, electrical/electronics engineering, management information systems (MIS), or a related technical field from a reputable university.
• 2–5 years of hands-on experience in IT security, technical IT auditing (systems, databases, networks), web/mobile application security assessments, security solution design/analysis, or preferably penetration testing; experience with SAP and Ariba is highly preferred.
• Certified or strongly committed to obtaining globally recognized professional certifications such as CISA, CISSP, CISM, CRISC, or equivalent.
• Excellent analytical thinking, problem-solving, and attention-to-detail skills with the proven ability to translate complex technical issues into clear, concise, and professional audit reports and presentations.
• Advanced command of both written and spoken English (mandatory).
• Highly motivated, continuous learner with a strong collaborative mindset, knowledge-sharing attitude, and excellent teamwork skills.

As an IT Auditor in our Audit team, you’ll:

• Provide independent and objective assurance on the design and operating effectiveness of the Group’s IT infrastructure, systems (including S4HANA and Ariba), applications, and processes to ensure full compliance with internal policies, external regulations, risk management frameworks, and corporate governance standards.
• Proactively monitor emerging cyber threats and vulnerabilities; conduct comprehensive IT risk assessments and security control evaluations; and deliver high-impact, actionable recommendations to strengthen the Group’s cybersecurity posture and mitigate risks.
• Track and follow up on audit findings and remediation actions, ensure timely implementation of corrective measures, and provide regular status reporting to senior management and the Audit Committee.
• Actively contribute to the development of the annual risk-based internal audit plan and the continuous maintenance of the IT risk universe.
• Serve as a trusted control and risk advisor by participating in major IT projects, digital transformation initiatives, and key technology implementations across the Group.