Strategic Information Security Leader: Governance & Risk

Anadolu Efes; Fatih; On-site; TRY 700,000 - 1,100,000; Full time

Job summary

Anadolu Efes is seeking an Information Security Manager to lead governance, risk management, and security operations in a global beverage company. You will shape the security strategy, manage budgets, and partner with Legal, IT, and other AG companies to align policies and drive risk reduction.

You will embed secure-by-design practices across projects, cloud, and OT, while fostering a strong security culture and ensuring regulatory compliance including KVKK and GDPR.

Qualifications

• Bachelor's degree in Computer Engineering, Information Systems, Information Security, Industrial Engineering or a related field.
• Professional certifications such as CISSP, CISM, CISA or equivalent are strongly preferred.
• Minimum 10 years of experience in Information Security/Cybersecurity/IT Risk Management, incl. 5+ years in leadership.
• Proven experience in information security governance, risk management, regulatory compliance and security operations.
• Strong knowledge of security frameworks (ISO/IEC 27001, NIST), security technologies, cloud and AI security; OT security a plus.
• Ability to translate cybersecurity risks into business impact; strong communication with executives.
• Experience working in a matrix or multi‑company group structure.
• Collaborative leadership, building high‑performing teams across functions.
• Strong analytical, program and crisis management skills; calm under pressure.
• Growth mindset, curiosity and openness to new technologies.
• Excellent command of written and spoken English.

Responsibilities

• Lead information security governance, including committees and decision-making.
• Build and maintain information security strategy aligned with AG standards and ISO/NIST.
• Develop and improve the information security program and control framework.
• Lead cybersecurity risk and maturity assessments with business units; report KPIs to leadership.
• Own information security budget and AG CIO Office alignment.
• Coach and develop the information security team and build cross‑functional partnerships.
• Ensure policy ownership and regulatory compliance including KVKK, GDPR and other requirements.
• Embed security by design across projects, cloud, and OT; oversee key controls and incident readiness.
• Oversee third‑party security requirements and supplier risk with Legal and Procurement.
• Lead security culture initiatives and awareness programs; drive phishing simulations.
• Own incident response and cyber resilience aligned with business continuity.

Skills

Information security leadership

Governance

Risk management

Executive communication

Security operations

Education

Bachelor's degree in Computer Engineering / Information Security / related field

CISSP / CISM / CISA or equivalent

Tools

ISO/IEC 27001

NIST

Cloud security

AI security

Job description

Anadolu Efes is seeking an Information Security Manager to lead governance, risk management, and security operations in a global beverage company. You will shape the security strategy, manage budgets, and partner with Legal, IT, and other AG companies to align policies and drive risk reduction.

You will embed secure-by-design practices across projects, cloud, and OT, while fostering a strong security culture and ensuring regulatory compliance including KVKK and GDPR.