Security Analyst

Hepsiburada

As you know a brand gets all its power from its employees first. Then it becomes a big family together with its customers and it gets stronger. We, Hepsiburada, are the most powerful family in online shopping in Turkey since 2001. In 30 product categories with over 12.7 million products, we all not only make e-commerce to be loved by the Turkish people but also we make it indispensable. We received numerous awards, we set unreachable records, and we reached legendary success. We were granted "Turkey's Most Popular Brand" award in 2011, 2012, 2013 and we were chosen "E-commerce Site of the Year” in 2013. Achieving these successes could be possible with our family, that is, our employees and our customers.

Would you also like to join our family to become more powerful, to develop our service understanding and to make a difference?

Remember, #gelecekburada!

İŞ TANIMI

• Participate in application and infrastructure projects to provide security planning advice
• Determine baseline security configuration standards for operating systems, network segmentation, and identity and access management
• Develop standards and practices for data encryption and tokenization based on the data classification criteria
• Conduct security assessments of internal systems, applications and IT infrastructure
• Coordinate with DevOps teams to advocate secure coding practices
• Document data flow of sensitive information within the organization (personally identifiable information) and recommend controls to ensure this data is adequately secured
• Validate IT infrastructure for security best practices, and recommend changes to enhance security and reduce risk where applicable
• Manage the privacy impact assessment process, in close collaboration with business stakeholders
• Ensure that business units, technology teams, and third parties follow the privacy management program, meet privacy policy requirements and address privacy concerns
• Collaborate with and assist business units and technology areas to develop corrective action plans for identified privacy compliance issues
• Support the creation of an inventory that documents how and why personal data is collected, shared and used
• Continuously update and re-evaluate the extent to which customer and employee information is collected and shared internally and externally
• Monitor the data request and usage processes, purpose-based authorized use and prevention mechanisms' effectiveness against unauthorized use for personal data
• Maintain the registry of all personal data stores and processing activities
• Serve as the internal advisor to technology and business departments to interpret privacy-policy-related questions