Senior IT GRC Lead: Risk, Compliance & Audit Expert

GİZLİ; Fatih; On-site; TRY 350,000 - 650,000; Full time

Job summary

GİZLİ seeks an experienced IT Governance, Risk & Compliance leader to establish and operate our IT GRC programs in a regulated financial services environment. You will monitor regulatory changes, translate requirements into controls, coordinate audits, and drive continuous improvement across IT policies, controls, and testing.

You will lead control testing, evidence collection, and remediation planning in collaboration with IT, Security, Risk, and Compliance teams, ensuring sustained regulatory

Qualifications

• Bachelor's degree in computer/engineering or related disciplines.
• 5+ years in IT Governance, IT Risk, IT Compliance, Information Security or IT Audit, preferably in financial services.
• Experience with BDDK regulations for information systems, information security, IT risk management, and IT audit processes.
• Hands-on ISO/IEC 27001 ISMS experience including internal audits, control testing, and remediation.
• Familiarity with ISO/IEC 27001, COBIT, ITIL, and NIST.
• An ability to translate regulatory/standard requirements into controls and testing plans.
• Experience in coordinating audits and evidence gathering across internal and regulatory bodies.
• Experience in gap analyses and remediation tracking.

Responsibilities

• Establish and operate IT Governance, Risk & Compliance processes.
• Operate continuous IT compliance and controls monitoring for BDDK, ISO/IEC 27001, and internal policies.
• Monitor legislation/regulations; assess impact on IT and information security processes.
• Maintain regulatory obligations register and review changes.
• Translate regulatory requirements into IT controls, owners, evidence, and testing frequencies.
• Maintain IT Compliance Control Matrix mapping requirements to policies and controls.
• Develop and execute IT compliance and control testing plans.
• Perform periodic control testing and reviews across information security, IAM, PAM, patch management, backups, logging, change/configuration management, BCM/DR, and third-party services.
• Assess design and operating effectiveness of IT controls; identify deficiencies.
• Keep documentation and evidence current and accessible for audits.
• Coordinate audits with IT, Security, Risk, Compliance, and regulators.
• Record findings and track remediation until closure.
• Conduct IT risk assessments and maintain IT Risk Register.
• Review and update IT and information security policies and procedures.
• Support ITIL-aligned process maturity and governance.
• Define roles/RACI and monitor third-party IT risks.
• Support BCM, BIA, DR activities from governance perspective.
• Monitor KPIs/SLAs and present dashboards to management.
• Report significant IT risks and audit findings to leadership.
• Drive improvement of IT GRC framework.

Skills

IT Governance

IT Risk

IT Compliance

Information Security

IT Audit

Regulatory frameworks

ISO 27001 ISMS

Leadership

Auditing

Documentation

Communication

Problem-solving

BDDK regulations

Education

Bachelor's degree in relevant disciplines

Tools

COBIT

ITIL

NIST

Job description

GİZLİ seeks an experienced IT Governance, Risk & Compliance leader to establish and operate our IT GRC programs in a regulated financial services environment. You will monitor regulatory changes, translate requirements into controls, coordinate audits, and drive continuous improvement across IT policies, controls, and testing.

You will lead control testing, evidence collection, and remediation planning in collaboration with IT, Security, Risk, and Compliance teams, ensuring sustained regulatory