IT Auditor: Cybersecurity & Tech Risk

RÖNESANS HOLDİNG; Çankaya; On-site; TRY 180,000 - 300,000; Full time

Job summary

Ronesans Holding seeks an IT Auditor in Ankara to join the Internal Audit Department. The role focuses on IT governance, security controls, and risk assessment across systems including S4HANA and Ariba.

The candidate will provide independent assurance on IT infrastructure and applications, report findings to the Audit Committee, and contribute to the annual internal audit plan. Fluent English is mandatory.

Qualifications

• Bachelor's degree in a technical field from a reputable university.
• 2–5 years of hands-on experience in IT security, technical IT auditing, security assessments, or penetration testing.
• Experience with SAP and Ariba is highly preferred.
• Globally recognized certifications such as CISA, CISSP, CISM, CRISC, or equivalent are desirable.
• Advanced written and spoken English (mandatory).

Responsibilities

• Provide independent and objective assurance on the design and operation of the Group's IT infrastructure, systems (including S4HANA and Ariba), applications, and processes.
• Conduct IT risk assessments and security control evaluations; deliver actionable recommendations to strengthen cybersecurity posture.
• Track audit findings, remediation actions, and report status to senior management and Audit Committee.
• Contribute to annual risk-based internal audit planning and IT risk universe maintenance.
• Participate in major IT projects and digital transformation initiatives as a risk advisor.

Skills

IT auditing

IT security

Penetration testing

SAP

Ariba

English (mandatory)

Education

Bachelor's degree in computer engineering / electrical/electronics engineering / MIS

Job description

Ronesans Holding seeks an IT Auditor in Ankara to join the Internal Audit Department. The role focuses on IT governance, security controls, and risk assessment across systems including S4HANA and Ariba.

The candidate will provide independent assurance on IT infrastructure and applications, report findings to the Audit Committee, and contribute to the annual internal audit plan. Fluent English is mandatory.