Senior InfoSec Architect - Security Architecture

Yapı Kredi Teknoloji; İzmit; Hybrid; TRY 180,000 - 240,000; Full time

Benefits offered by this job

Hybrid work model

Koç Group Community offices

Structured technology career path

BizClub & KoçAilem privileges

Company-retirement insurance

Birthday off day

Job summary

Yapı Kredi Technology is seeking a skilled security professional to ensure regulatory compliance across SDLC/IDLC projects and to lead threat modelling and risk management activities. You will guide security decisions, document design security considerations, and ensure software supply chain integrity.

The role requires strong English, collaboration skills, and 3+ years in related security areas with a total IT experience of 9+ years, in a hybrid work environment within Turkey.

Qualifications

• Bachelor’s degree in Computer, Electronics, Communication Engineering or relevant fields.
• Minimum 3 years of experience in project management, Agile approaches, DevSecOps; 9+ years IT total.
• Solid knowledge of threat modelling process and tools.
• Knowledge of crypto, blockchain, AI fields preferred.
• Strong awareness of security regulations (BDDK, PCI DSS, PCI PIN, Swift Security Framework, KVKK, OWASP, OWASP SAMM) and best practices (NIST, ISO, CIS).
• Certifications such as CISA, CISM, CISSP preferred.
• Strong English written and spoken skills; good interpersonal abilities.

Responsibilities

• Ensure security compliance requirements in SDLC/IDLC projects (BDDK, PCI DSS, PCI PIN, Swift, KVKK, CIS).
• Evaluate security requirements and risks; define preventive/detective controls.
• Perform threat assessments at the project level.
• Provide proactive security guidance in design processes.
• Facilitate informed security decisions through risk management and timely actions.
• Document key security decisions across development phases.
• Define major activities, milestones, and security planning.
• Ensure supply chain and software security assurance.

Skills

Threat modelling

Security governance

Risk assessment

Security architecture

Cloud security

Blockchain knowledge

Crypto knowledge

Excellent communication

English (written and spoken)

Team collaboration

Education

Bachelor’s degree in Computer/Electronics/Communication Engineering

Tools

Threat modelling tools

PCI DSS frameworks

NIST/ISO/CIS security standards

Job description

Yapı Kredi Technology is seeking a skilled security professional to ensure regulatory compliance across SDLC/IDLC projects and to lead threat modelling and risk management activities. You will guide security decisions, document design security considerations, and ensure software supply chain integrity.

The role requires strong English, collaboration skills, and 3+ years in related security areas with a total IT experience of 9+ years, in a hybrid work environment within Turkey.