Senior Cybersecurity Architect & ISMS Lead

CoreX Holding BV; Sarıyer; On-site; TRY 400,000 - 660,000; Full time

Job summary

CoreX Holding BV in Istanbul (Maslak) seeks a Senior Cybersecurity Specialist to lead information security efforts at our headquarters. You will own ISMS processes, drive policy development, and ensure ISO 27001 compliance across the organization.

You will oversee KVKK, GDPR, and NIS2 controls, conduct risk assessments, and manage third-party security programs. Strong communication and teamwork are essential for coordinating security projects and awareness initiatives.

Qualifications

• Bachelor’s degree in a relevant field; strong analytical skills required.
• Minimum 5 years of experience in information security and related domains.
• Experience with ISMS, risk management, and security architectures.
• Familiarity with ISO 27001, NIST, CIS, KVKK, and GDPR frameworks; certifications are a plus.

Responsibilities

• Manage and improve Information Security Management System (ISMS) processes.
• Develop and maintain information security policies, standards, and procedures.
• Ensure ISO 27001 compliance and manage audit processes.
• Oversee KVKK, GDPR, and NIS2 controls implementation and maturation.
• Conduct risk assessments and manage mitigation actions; drive third-party risk management.
• Manage security tools (SIEM, DLP, PAM, XDR) and monitor incidents.
• Coordinate vulnerability management and penetration testing activities.
• Plan and implement security projects and promote security awareness.

Skills

ISMS

Risk management

Security architectures

Data security

IAM/PAM

SOC processes

Network security

Windows/Linux

Education

Bachelor’s degree in a relevant field

Tools

SIEM

DLP

PAM

XDR

ISO 27001 Lead Auditor tools

Job description

CoreX Holding BV in Istanbul (Maslak) seeks a Senior Cybersecurity Specialist to lead information security efforts at our headquarters. You will own ISMS processes, drive policy development, and ensure ISO 27001 compliance across the organization.

You will oversee KVKK, GDPR, and NIS2 controls, conduct risk assessments, and manage third-party security programs. Strong communication and teamwork are essential for coordinating security projects and awareness initiatives.