Senior Information Security & Security Operations Specialist

Aras Kargo; Fatih; Hybrid; TRY 600,000 - 900,000; Full time

Benefits offered by this job

Hybrid work model

Flexible working hours

Early finish on Fridays

Taxi transportation for HQ

Birthday leave

30 days paternity leave

Meal card

Supplementary health insurance

Life insurance

Personal accident insurance

Professional development & English培训

Job summary

Aras Kargo is expanding its security team and seeks an Information Security & Security Operations Specialist to build a robust cybersecurity posture. You will manage governance, compliance, and operational security in a dynamic environment supported by enterprise resources.

Key responsibilities include leading ISO 27001 and NIS2 programs, developing security policies, coordinating audits, and driving risk management and awareness.

Qualifications

• Proven experience in network security, information security, audit, and compliance.
• Strong knowledge of ISO/IEC frameworks and security standards.
• Experience with SIEM, XDR and SOAR platforms.

Responsibilities

• Lead and maintain ISO 27001 and NIS2 compliance programs.
• Develop and maintain information security policies, procedures, and guidelines.
• Coordinate internal and external security audits and assessments.
• Support risk management, vendor assessments, and security awareness training.
• Ensure business continuity and perform disaster recovery tests with stakeholders.
• Operate and maintain SIEM, XDR, and log management platforms.
• Monitor and respond to security alerts and incidents.
• Conduct vulnerability management and coordinate remediation.
• Participate in penetration testing activities and coordinate findings remediation.
• Contribute to disaster recovery planning and tabletop exercises.
• Assist in incident response planning and execution.

Skills

Network security

Information security

Audit and compliance

Security audits

Risk management

Security awareness

Business continuity

Disaster recovery

Incident response

Vulnerability management

Penetration testing

Resilience exercises

Governance

Identity access management

Security testing

Tools

SIEM

XDR

SOAR

Job description

Our journey, which began in 1979, has grown into a strong logistics network that delivers more than 1 million shipments daily across Türkiye, with 13 Regional Directorates, 28 Transfer Centers, nearly 1,000 branches, a fleet of 3,000 vehicles, and a team of 14,000 employees. As a subsidiary of Austrian Post Group, we continue our operations with international strength while investing in technology and innovation through Aras Digital, expanding beyond borders through Aras Global, and supporting the unifying power of sports through our Aras Kargo Women's Volleyball Team.

With our renewed identity, experience, and energy, we are setting our course toward the future. If you would like to grow, develop, and take a strong step forward in your career on this journey with us, we would be delighted to welcome you to our team.

We are expanding our security capabilities and looking for an Information Security & Security Operations Specialist to join our small but highly capable security team. This role will be a significant contributor building a cybersecurity posture for the organization. Will handle governance, compliance and operational security in a dynamic, startup-style environment backed by enterprise resources.

What You’ll Do

• Lead and maintain ISO 27001 and NIS2 compliance programs.
• Develop, implement, and maintain information security policies, procedures, and guidelines.
• Coordinate internal and external security audits and assessments.
• Support risk management, vendor assessments, and security awareness training.
• Ensure business continuity, perform disaster recovery tests in collaboration with stakeholders.

Technical Security Operations

• Operate and maintain SIEM, XDR, and log management platforms.
• Monitor and respond to security alerts and incidents.
• Conduct vulnerability management and coordinate remediation.
• Participate in penetration testing activities (internal & external) and coordinate findings remediation.
• Contribute to disaster recovery (DR) and business continuity planning, including scenario testing and tabletop exercises.
• Assist in incident response planning and execution.

What We’re Looking For

• Proven experience in network security, information security, audit, and compliance.
• Strong working knowledge of ISO 27k Certifications and NIS2 directive.
• Apply and maintain security benchmarking standards (e.g., CIS Benchmarks, NIST CSF, ISO 27002, OWASP ASVS) across systems and infrastructure.
• Experience with SIEM, XDR and SOAR or related security tools.
• Understanding identity access management monitoring.
• Experience participating in security testing and resilience exercises.
• Ability to balance technical problem-solving with governance and process work.
• Ability to take ownership of security initiatives and deliver measurable results.
• Strong collaboration skills, with the ability to work effectively across multiple teams and stakeholders.
• Excellent communication skills in English.

Nice to Have

• Security certifications (CISSP, CISM, ISO 27001 Lead Implementer/Auditor, CompTIA Security+).
• Experience in logistics, supply chain, or cargo sectors.

If you’re ready to make a real impact in a growing security team, we’d love to hear from you.

What Awaits You at Aras?

With our values of “We Are Aras: Purpose, Performance, and Joy,” we focus on people, society, and creating together. We offer an inclusive culture that supports the well-being, development, and work-life balance of our employees in every aspect. In this work experience, where you will feel valued and ready for the future:

You become part of a flexible and balanced working experience (benefits such as a hybrid working model for office employees, flexible working hours, early finish on Fridays, and taxi transportation for Headquarters employees).

You can create time for the special moments in your life (practices such as birthday leave and 30 days of paternity leave).

You benefit from comprehensive fringe benefits that support your well-being and safety (the Meditopia app, meal card, supplementary health insurance, life insurance, and personal accident insurance).

You can strengthen your competencies through continuous learning and development opportunities (technical and behavioral online training through Aras AkademiGO, leadership and talent programs, English language training, and postgraduate education support).

You become part of a strong team culture that focuses on collaboration, recognition, and inclusiveness, while taking ownership and responsibility.

Aras Kargo is an equal opportunity employer. We value diversity and are committed to creating an inclusive working environment for all employees. All qualified applicants are encouraged to apply regardless of gender, age, disability, or background.

You may visit the link to reach our data privacy policy: