Senior IT GRC Specialist – ISO 27001 & Risk & Compliance

Gizli Şirket; Fatih; On-site; TRY 600,000 - 900,000; Full time

Job summary

Gizli Şirket is seeking an experienced IT Governance, Risk & Compliance professional to lead regulatory compliance, risk assessments, and control testing. You will translate BDDK and international standards into actionable IT controls, coordinate audits, and drive evidence collection across IT and security teams.

The role requires strong knowledge of ISO/IEC 27001, COBIT, ITIL, and NIST, plus experience in banking or regulated sectors.

Qualifications

• Bachelor's degree in a relevant discipline is required.
• Minimum 5 years of experience in IT Governance, IT Risk, IT Compliance, Information Security Compliance or IT Audit.
• Strong knowledge of BDDK regulations for information systems and IT risk management.
• Hands-on experience with ISMS (ISO/IEC 27001) audits and remediation.
• Familiarity with COBIT, ITIL and NIST frameworks.
• Experience in regulatory and control testing, audit preparation, and evidence collection.

Responsibilities

• Establish and run IT governance, risk and compliance processes.
• Implement continuous IT compliance monitoring for BDDK, ISO 27001, and internal policies.
• Coordinate audits with IT, Security, Risk, and Compliance teams.
• Translate regulatory requirements into IT controls and evidence requirements.
• Maintain IT policies, procedures and control matrices.
• Develop and execute IT control testing plans and risk assessments.
• Record audit findings and drive remediation with action owners.
• Report IT risk, compliance gaps, and control deficiencies to management.

Skills

IT Governance

IT Risk

IT Compliance

Information Security

IT Audit

Regulatory knowledge

Banking experience

Education

Bachelor's degree

Tools

ISO/IEC 27001

COBIT

ITIL

NIST

BDDK regulations

Job description

Gizli Şirket is seeking an experienced IT Governance, Risk & Compliance professional to lead regulatory compliance, risk assessments, and control testing. You will translate BDDK and international standards into actionable IT controls, coordinate audits, and drive evidence collection across IT and security teams.

The role requires strong knowledge of ISO/IEC 27001, COBIT, ITIL, and NIST, plus experience in banking or regulated sectors.