Senior GRC Consultant - Lead Risk & Compliance

Lostar; Adapazarı, Fatih; Hybrid; TRY 300,000 - 500,000; Full time

Benefits offered by this job

Hybrid working

Private health insurance

Meal and transport support

Job summary

Lostar is a long‑standing information security firm in Turkey, seeking a Senior Consultant to lead Governance, Risk and Compliance engagements. You will advise enterprise clients across banking, insurance, energy, telecoms and manufacturing on information security management, IT service management, business continuity and data protection.

The role is client‑facing with ownership of delivery and a hybrid work pattern.

Qualifications

• Bachelor's degree in Computer/Engineering or information systems field
• Minimum 6 years' experience in IT governance, information security management, IT audit or GRC consultancy
• Proven experience with international standards, frameworks and regulation (ISO 27001/22301/20000, COBIT, ITIL, KVKK, GDPR)

Responsibilities

• Lead GRC engagements end to end: scoping, gap analysis, control design, documentation, implementation support and internal audit.
• Advise clients against standards and regulatory requirements (ISO, COBIT, KVKK, GDPR) and Turkish regulators (BDDK, SPK, TCMB, EPDK, SEDDK).
• Manage 2–4 parallel engagements: track status, scope, timelines, and keep client and teams informed.
• Prepare and present findings, risk assessments and remediation roadmaps to client management including board level.
• Support clients through certification audits and regulatory examinations.
• Mentor junior consultants and contribute to internal methodology and templates.
• Contribute to business development: scoping calls, proposals, and research on emerging regulations.
• Work with AI-assisted delivery tooling and shape it for project delivery.

Skills

IT governance

Information security management

IT audit

GRC consultancy

Regulatory requirements

Education

Bachelor's degree in IT/Engineering

Job description

Lostar is a long‑standing information security firm in Turkey, seeking a Senior Consultant to lead Governance, Risk and Compliance engagements. You will advise enterprise clients across banking, insurance, energy, telecoms and manufacturing on information security management, IT service management, business continuity and data protection.

The role is client‑facing with ownership of delivery and a hybrid work pattern.