IT Governance & Risk Officer — Flexible Hours & Growth

BNP Paribas Cardif; Fatih; Hybrid; TRY 450,000 - 750,000; Full time

Benefits offered by this job

Flexible hours

Home office

Online trainings

Internal career opportunities

Career development path

Wellness workshops

Birthday leave

Buddy program

Job summary

BNP Paribas Cardif in Turkey seeks a proactive IT Risk professional to analyze IT risks, coordinate remediation, and ensure governance compliance across the organization. You will collaborate with the first line of defense and auditors to drive effective risk management.

The role emphasizes incident handling, vulnerability awareness, and clear communication of risk to diverse stakeholders within a hybrid work setup.

Qualifications

• Knowledge of IT risk management and analysis methods.
• Experience with internal and external security and governance audits.
• Ability to coordinate resources and communicate with diverse audiences.
• Understanding of CIS20, NIST, ISO 27001/22301 and SOC 2 frameworks.
• Security-related degrees or qualifications such as CRISC, CISSP, CISA, CISM, CEH.

Responsibilities

• Perform IT Risk Analysis and report risk to stakeholders.
• Identify action plans to respond to IT risks and monitor progress.
• Oversee IT risk controls and report findings to risk registers.
• Organize IT Risk committees and communicate risk status to stakeholders.
• Ensure compliance with IT governance rules and manage remediation with auditors.

Skills

IT risk management

IT governance

Risk analysis methods

Stakeholder communication

Incident handling

Vulnerability tools

Regulatory frameworks

Education

IT Security degree

Security certifications

Tools

Penetration testing tools

Job description

BNP Paribas Cardif in Turkey seeks a proactive IT Risk professional to analyze IT risks, coordinate remediation, and ensure governance compliance across the organization. You will collaborate with the first line of defense and auditors to drive effective risk management.

The role emphasizes incident handling, vulnerability awareness, and clear communication of risk to diverse stakeholders within a hybrid work setup.