Risk, Compliance & Information Security Executive

Ticimax; Ataşehir; On-site; TRY 400,000 - 560,000; Full time

Job summary

Ticimax is seeking a Risk, Compliance & Application Security Executive to ensure our software products are secure and compliant with regulations. You will manage PCI DSS and ISO 27001 programs, oversee vulnerability assessments, and coordinate internal and external penetration tests.

You will analyze vulnerabilities, implement controls, and enhance our GRC/ SIEM monitoring while preparing for audits and maintaining documentation. Strong English communication is required for global teamwork.

Qualifications

• Experience with PCI DSS and ISO 27001 compliance and certification.
• Hands-on vulnerability assessment and penetration testing.
• Strong documentation and audit preparation skills.
• Proficiency in English (written and verbal).

Responsibilities

• Manage PCI DSS (Service Provider Level 1) and ISO 27001 compliance and certification processes
• Analyze security vulnerabilities and propose effective technical and organizational controls
• Plan and coordinate internal and external penetration tests, and follow up on remediation
• Perform regular vulnerability assessments using tools such as Nessus, Qualys, etc.
• Conduct risk assessments and prepare corrective action plans
• Use SIEM and GRC tools for monitoring and reporting
• Prepare for audits and manage relevant documentation
• Raise awareness across the organization on compliance and security best practices

Skills

PCI DSS

ISO 27001

Vulnerability scanning

GRC & compliance reporting

Documentation & audit prep

English language

Tools

Nessus

Qualys

SIEM

Job description

Shape Your Future at Ticimax!

Position: Risk, Compliance & Application Security Executive

Location: Kozyatağı Allianz Tower (Hybrid)

Job Summary

We are looking for a Risk, Compliance & Application Security Executive to ensure our software products are secure and compliant with relevant regulations. This role will manage penetration testing, vulnerability assessment, and oversee certification processes such as PCI DSS and ISO 27001.

Responsibilities:

• Manage PCI DSS (Service Provider Level 1) and ISO 27001 compliance and certification processes
• Analyze security vulnerabilities and propose effective technical and organizational controls
• Plan and coordinate internal and external penetration tests, and follow up on remediation
• Perform regular vulnerability assessments using tools such as Nessus, Qualys, etc.
• Conduct risk assessments and prepare corrective action plans
• Use SIEM and GRC tools for monitoring and reporting
• Prepare for audits and manage relevant documentation
• Raise awareness across the organization on compliance and security best practices

Required Skills:

• Solid understanding of PCI DSS and ISO 27001 frameworks
• Hands-on experience with vulnerability scanning tools (e.g. Nessus, Qualys) and SIEM platforms
• Familiarity with GRC systems and compliance reporting
• Strong documentation, audit preparation, and analytical skills
• Proficiency in English (written and verbal)

Nice to Have:

• Experience in secure software development practices
• Familiarity with remediation follow-ups after penetration tests
• Relevant certifications (e.g. OSCP, CEH, ISO 27001 Lead Auditor, CISA)

Does This Interest You?