Senior Information Security & GRC Leader

Bayegan; Pendik; On-site; TRY 600,000 - 900,000; Full time

Benefits offered by this job

Professional development opportunities

Long-term career growth

Cross-functional international teams

Job summary

Bayegan seeks a Senior Information Security & Compliance Executive to safeguard information assets and drive GRC. Translate risks into business actions, oversee security operations, and coordinate audits with legal, IT, and external partners.

You will lead controls across endpoints, identities, email, cloud, and applications, manage ISO 27001 activities, KVKK/GDPR, and risk-based improvements while engaging with stakeholders in Turkish and English.

Qualifications

• Bachelor’s degree in a related field and 5+ years in information security, cyber operations, security engineering, IT risk, audit, or GRC.
• Hands-on with Microsoft Defender products; Defender for Cloud, Sentinel, Entra ID, Intune, Purview experience desirable.
• Experience with EDR/XDR, SIEM/SOAR, vulnerability management, and email security.
• Knowledge of KVKK and GDPR; ability to translate compliance into technical controls.
• Certifications such as ISO 27001 Lead Auditor, CISSP, CISM, CASP are assets.
• Strong documentation, stakeholder management, and English/Turkish communication.

Responsibilities

• Operate, monitor, and continuously improve enterprise security controls across endpoints, identities, email, cloud services, apps, and users.
• Administer Microsoft security capabilities (Defender XDR, Defender for Endpoint/Office 365, Cloud, Sentinel, Entra ID, Purview, Intune).
• Coordinate SOC operations and MSPs; monitor service quality, use cases, alerts, incident response, and SLAs.
• Support ISO/IEC 27001 activities: risk assessments, SoA, internal audits, management reviews, and certification activities.
• Assess KVKK/GDPR compliance with Legal and business teams; drive remediation and controls.
• Plan vulnerability management, penetration tests, remediation tracking, and risk acceptance processes.
• Lead cyber incident response, root-cause analysis, evidence preservation, and post-incident improvements.
• Embed security and privacy into infrastructure, cloud, apps, procurement, and supplier projects.
• Conduct third-party security assessments and monitor supplier risks and security commitments.
• Prepare security KPIs/KRIs, risk summaries, audit findings, and management presentations.

Skills

Information Security

GRC

Risk Management

Auditing

Incident Response

Cloud Security

Microsoft Defender

KVKK/GDPR

ISO 27001

English/Turkish

Education

Bachelor's degree in Computer Engineering/CS/IS

Tools

Trend Micro

Branddefense

SIEM/SOAR

EDR/XDR

Microsoft Defender suite

ISO 27001 Lead Auditor (desirable)

Job description

Bayegan seeks a Senior Information Security & Compliance Executive to safeguard information assets and drive GRC. Translate risks into business actions, oversee security operations, and coordinate audits with legal, IT, and external partners.

You will lead controls across endpoints, identities, email, cloud, and applications, manage ISO 27001 activities, KVKK/GDPR, and risk-based improvements while engaging with stakeholders in Turkish and English.