Senior IT GRC & ITIL Process Lead

Hepiyi Sigorta; Ümraniye; On-site; TRY 300,000 - 520,000; Full time

Job summary

Hepiyi Sigorta in Turkey seeks a Senior IT Governance, Risk & Compliance (IT GRC) Specialist to lead governance, risk, compliance activities and ITIL process development. You will coordinate internal and external audits, document policies, and ensure controls align with regulatory standards across the organization.

The role requires 4–5 years of IT GRC/IT Audit experience, strong analytical skills, and collaboration with IT teams and auditors. Finance/insurance sector experience is preferred.

Qualifications

• Bachelor’s degree in a related field (e.g., Computer Engineering, Computer Science, MIS)
• 4–5 years of IT GRC/IT Audit, risk, or compliance experience
• Knowledge of ITIL processes and service management
• Familiarity with COBIT, ISO 27001, ITIL, and NIST frameworks
• Experience preparing policies, procedures, standards, and process documentation
• Experience coordinating internal and external audits and providing audit evidence
• Ability to document, assess, and monitor IT risk and control environments
• Strong analytical, documentation, reporting, and follow-up skills
• Effective communication with IT teams and stakeholders
• Experience in finance/insurance sectors preferred

Responsibilities

• Establish and sustain IT GRC processes within the ITIL framework
• Prepare and review IT policies, procedures, standards, and process documentation
• Define roles, create RACI matrices, and monitor process compliance
• Coordinate between IT teams and auditors during audits
• Record audit findings and track remediation actions to closure
• Assess IT controls and identify improvement actions for deficiencies
• Maintain IT risk registers and track risk mitigation actions
• Support ISO 27001, COBIT, ITIL, and NIST-based assessments
• Coordinate BCM/DR activities and testing processes
• Provide governance support for audit management and documentation needs
• Monitor and report IT controls related to information security and access management
• Evaluate impact of regulations on IT activities and ensure compliance

Skills

IT Governance

IT Risk

IT Compliance

IT Audit

ITIL

NIST

COBIT

ISO 27001

Policy Documentation

Audit Coordination

Education

Bachelor's degree in Computer Engineering, Computer Science, MIS or related field

Job description

Hepiyi Sigorta in Turkey seeks a Senior IT Governance, Risk & Compliance (IT GRC) Specialist to lead governance, risk, compliance activities and ITIL process development. You will coordinate internal and external audits, document policies, and ensure controls align with regulatory standards across the organization.

The role requires 4–5 years of IT GRC/IT Audit experience, strong analytical skills, and collaboration with IT teams and auditors. Finance/insurance sector experience is preferred.