Lead, Information Systems Internal Controls & Security

ICBC Turkey; Fatih; On-site; TRY 600,000 - 900,000; Full time

Job summary

ICBC Turkey, the Turkish subsidiary of ICBC Group, seeks a seasoned professional for the Internal Control and Compliance Department to oversee IS controls and governance. The role focuses on monitoring, reporting, and improving information security practices across the bank and its subsidiaries.

Requirements include a relevant degree, 5+ years in IS control/audit/governance, and familiarity with BRSA regulations and standards such as COBIT, ITIL, ISO 27001, and ISO 22301.

Qualifications

• Bachelor’s or master's degree in a relevant field from a recognized university.
• At least 5 years of experience in Information Systems Internal Control, IS Audit, or IS Governance.
• Knowledge of BRSA regulations and information security standards (COBIT, ITIL, ISO 27001, ISO 22301).
• Certifications such as CISA, CISM, CISSP, ISO 27001 Lead Auditor, ISO 22301 are preferred.
• Knowledge of data analytics, reporting, and SQL.

Responsibilities

• Controlling the activities and processes of Bank information systems and subsidiaries subject to consolidation.
• Prepare IS internal control reports and track internal control findings.
• Assess effectiveness of IS general controls: data security, access, change, log management, backups, and business continuity.
• Monitor compliance with CBRT, CMB, and Turkish Data Protection Authority regulations.
• Enhance IS control framework in line with regulatory changes and tech developments.
• Monitor SDLC controls, code quality, and security scan results; follow up actions.
• Assess design and effectiveness of cybersecurity controls and propose mitigations.
• Provide consultancy for new projects and applications.

Skills

IS internal control

IS audit

governance

COBIT

ITIL

ISO 27001

ISO 22301

SQL

English (advanced)

Education

Bachelor's degree in Computer Engineering

Master's degree in Software Engineering

Tools

COBIT

ISO 27001 Lead Auditor

Job description

ICBC Turkey, the Turkish subsidiary of ICBC Group, seeks a seasoned professional for the Internal Control and Compliance Department to oversee IS controls and governance. The role focuses on monitoring, reporting, and improving information security practices across the bank and its subsidiaries.

Requirements include a relevant degree, 5+ years in IS control/audit/governance, and familiarity with BRSA regulations and standards such as COBIT, ITIL, ISO 27001, and ISO 22301.