Senior Information Security & Risk Leader

Aygaz; Ümraniye; On-site; TRY 450,000 - 750,000; Full time

Job summary

We are seeking an experienced IT Governance and Information Security leader to join our Information Technology organization, providing leadership in information security governance, IT risk management, regulatory compliance, and audit activities, while enhancing the company's IT governance framework and ensuring alignment with international standards and best practices.

The role focuses on ISMS (ISO 27001), audits, and risk management, requiring a strong leadership track record and ability to

Qualifications

• Bachelor's degree in a relevant field
• 10+ years of experience in information security, IT risk management or governance
• 3+ years in a managerial role leading security teams
• ISMS expertise with ISO 27001 and audit/certification experience
• Knowledge of KVKK, GDPR and data privacy regulations
• Experience managing information security risks across complex tech environments
• Proven vulnerability management and incident response capabilities
• Familiarity with COBIT and ITIL governance frameworks
• Strong leadership and cross-functional collaboration
• Excellent stakeholder management and communication skills

Responsibilities

• Lead the management and continuous improvement of the Information Security Management System (ISMS)
• Drive compliance programs related to ISO 27001 and IT governance standards
• Assess and enhance information security policies, procedures and controls
• Lead IT risk management, governance and internal control activities
• Oversee identification, assessment and monitoring of information security risks
• Oversee vulnerability management and remediation of gaps
• Coordinate penetration testing and security assessments
• Lead internal and external audit engagements and remediation of findings
• Monitor regulatory changes and ensure compliance
• Align IT service management with security and compliance requirements
• Oversee third-party security risk processes
• Report security metrics to senior management
• Foster a culture of information security awareness
• Integrate security into IT projects and initiatives
• Monitor emerging threats and provide strategic recommendations

Skills

Leadership

Stakeholder management

Communication skills

Crisis management

Education

Bachelor's degree in a relevant field

Tools

ISO 27001

COBIT

ITIL

CISM

CISSP

CISA

CRISC

Job description

We are seeking an experienced IT Governance and Information Security leader to join our Information Technology organization, providing leadership in information security governance, IT risk management, regulatory compliance, and audit activities, while enhancing the company's IT governance framework and ensuring alignment with international standards and best practices.

The role focuses on ISMS (ISO 27001), audits, and risk management, requiring a strong leadership track record and ability to