Strategic IT Governance & Risk Leader

TOM; Fatih; On-site; TRY 420,000 - 750,000; Full time

Job summary

TOM Bank, Türkiye’s leading digital bank, seeks an IT Governance & Risk Manager to oversee governance, risk, and compliance across IT, ensuring robust controls and regulatory alignment. The role emphasizes IT continuity, disaster recovery, and risk-based decision support.

The candidate will drive adherence to standards (COBIT, ITIL, ISO/IEC), coordinate audits, and collaborate with multiple业务 lines to strengthen information security and business resilience.

Qualifications

• BS in Computer Engineering, Computer Science or related fields.
• Minimum 8 years of experience in IT governance, information security, IT risk, IT assurance, audit, internal control, assessment, or compliance in finance.
• Experience with regulatory IT audit (BDDK, TCMB, Risk Merkezi).
• Knowledge of IT governance and controls frameworks (COBIT, ITIL, CIS, ISO 27001, ISO22301, KVKK) and best security practices (NIST, ISO).

Responsibilities

• Prepare procedures, instructions, duties and responsibilities per ITIL, COBIT, ISO 27001, ISO 22301, KVKK; assign to IT teams.
• Examine governance, risk and compliance processes and prepare analyses, docs and reports.
• Keep IT procedures and processes up-to-date; perform internal controls and remediation tracking.
• Plan third‑party controls and audits; monitor remediation actions; create IT risk inventory.
• Support IT audits and IT risk management activities; monitor remediation actions.
• Facilitate access management and separation of duties controls; design KPI dashboards.

Skills

IT governance

Information security

IT risk

Audit

Compliance

Regulatory IT audit

Business continuity

Communication

Education

BS in Computer Engineering/Computer Science or related fields

Tools

COBIT

ITIL

ISO 27001

ISO 22301

KVKK

Job description

TOM Bank, Türkiye’s leading digital bank, seeks an IT Governance & Risk Manager to oversee governance, risk, and compliance across IT, ensuring robust controls and regulatory alignment. The role emphasizes IT continuity, disaster recovery, and risk-based decision support.

The candidate will drive adherence to standards (COBIT, ITIL, ISO/IEC), coordinate audits, and collaborate with multiple业务 lines to strengthen information security and business resilience.