IT Governance & Risk Manager

TOM; Fatih; On-site; TRY 420,000 - 750,000; Full time

Job summary

TOM Bank, Türkiye’s leading digital bank, seeks an IT Governance & Risk Manager to oversee governance, risk, and compliance across IT, ensuring robust controls and regulatory alignment. The role emphasizes IT continuity, disaster recovery, and risk-based decision support.

The candidate will drive adherence to standards (COBIT, ITIL, ISO/IEC), coordinate audits, and collaborate with multiple业务 lines to strengthen information security and business resilience.

Qualifications

• BS in Computer Engineering, Computer Science or related fields.
• Minimum 8 years of experience in IT governance, information security, IT risk, IT assurance, audit, internal control, assessment, or compliance in finance.
• Experience with regulatory IT audit (BDDK, TCMB, Risk Merkezi).
• Knowledge of IT governance and controls frameworks (COBIT, ITIL, CIS, ISO 27001, ISO22301, KVKK) and best security practices (NIST, ISO).

Responsibilities

• Prepare procedures, instructions, duties and responsibilities per ITIL, COBIT, ISO 27001, ISO 22301, KVKK; assign to IT teams.
• Examine governance, risk and compliance processes and prepare analyses, docs and reports.
• Keep IT procedures and processes up-to-date; perform internal controls and remediation tracking.
• Plan third‑party controls and audits; monitor remediation actions; create IT risk inventory.
• Support IT audits and IT risk management activities; monitor remediation actions.
• Facilitate access management and separation of duties controls; design KPI dashboards.

Skills

IT governance

Information security

IT risk

Audit

Compliance

Regulatory IT audit

Business continuity

Communication

Education

BS in Computer Engineering/Computer Science or related fields

Tools

COBIT

ITIL

ISO 27001

ISO 22301

KVKK

Job description

About Us

How would you like to be part of TOM Bank, Türkiye’s largest digital bank*?

With an app rating of 4.8/5, TOM Bank provides its customers with a seamless, easy and With an app rating of 4.8/5, TOM Bank offers its customers a seamless, convenient, and accessible end-to-end banking experience. If you’re passionate about taking customer experience to the next level and winning our customers’ hearts, we’d love to hear from you!

About Us

How would you like to be part of TOM Bank, Türkiye’s largest digital bank*?

With an app rating of 4.8/5, TOM Bank provides its customers with a seamless, easy and With an app rating of 4.8/5, TOM Bank offers its customers a seamless, convenient, and accessible end-to-end banking experience. If you’re passionate about taking customer experience to the next level and winning our customers’ hearts, we’d love to hear from you!

Established under Aydın Holding, which is home to well-established brands such as A101, English Home, Eve, and Memorial, TOM Bank has made a remarkable impact on the banking industry in a short time, reaching 12 million users and over 4 million banking customers since its launch.

As TOM we are,

• Customer Passionate
• Game Changers
• Smart Efficient
• Super Clear
• The Dream Team

Ready to join us? Let’s shape the future of banking together!

• Based on the number of credit cards. According to BKM data for June 2026, TOM Participation Bank is Türkiye’s largest digital bank in terms of credit card count.

IT Governance & Risk Manager

Qualifications / Requirements

• BS in Computer Engineering, Computer Science or related fields,
• Minimum 8 years of experience in IT governance, Information Security, IT Risk, IT Assurance, Audit, Internal Control,s Assessment, Compliance in finance industry
• Experience with regulatory IT Audit (BDDK, TCMB, Risk Merkezi)
• Knowledge and experience about IT Governance and controls frameworks (COBIT, ITIL, CIS,ISO 27001, ISO22301 and KVKK) and best security practices (e.g. NIST, ISO)
• Ability to meet the requirements of a fast-paced environment with multiple demands and priorities
• Understanding of information systems controls across a wide range of systems including operating systems, databases, applications, network, security and technology tools
• Support and challenge related business lines in identifying and assessing the IT risks and business continuity risks as well as for the remediation actions
• Excellent written and verbal communication skills in English
• Business Continuity and Information Security Related Certifications such as CISA, ISO27001, ISO22301, CRISC, CGEIT, CISM is a plus
• A good team player
• Curious about new Technologies
• Successful in human relations, effective verbal and written communication skill
• No military obligation
• Excellent communication (written and oral) and interpersonal skills

Job Description

IT Governance & Risk Management

• Preparation of procedures and instructions, including duties and responsibilities according to ITIL, COBIT, ISO 27001, ISO 22301, KVKK, etc., assignment and follow-up of related tasks to IT teams
• Examining the processes related to governance, risk and compliance areas and preparing the necessary analysis, documentation and reports.
• Keeping the all IT procedure and processes up-to-date
• Performing internal control activities and following remediation activities
• Planning third party controls and audits and monitoring remediation actions
• Creating IT risk inventory and following the action list
• Supporting IT-related audits and IT Risk Management activities and monitoring remediation actions
• Facilitating access management and segregation of duties controls
• Designing, monitoring and reporting performance monitoring criteria (KPIs and metric dashboard) required for IT organizations to achieve their goals

IT Continuity & Disaster Recovery

• Preparation IT Continuity strategies and plans in comply with the TOM’s business continuity strategies
• Creating and following the IT Continuity dashboard
• Preparation the disaster recovery test plans, performing the disaster recovery test periodically, reporting the results and following its actions
• Keeping the all IT Continuity procedure and processes up-to-date