Information Security Specialist

Inveo Yatırım Bankası A.Ş.

Job Description

• Developed Information Security policies, processes and procedures,
• Ensure Information Security compliance laws, regulations and requirements (BDDK, KVKK, ISO27001, PCI DSS, COBIT, SWIFT),
• Conduct effectively information security risk assessments on banking technologies especially on new ones such as API services, open banking techs, payment systems etc.
• Perform risk control frameworks in IT environment,
• Implement supply chain Security (Pre contract, new contract, contract renewal) , third party/vendor security risk assessments,
• Monitor security system logs and reports on discovered anomalies and develop existing correlations in incident mng processes,
• Plan and execute security test processes and enhance security findings with stakeholders,
• Lead asset classification and data protection programs,
• Ensure security awareness and trainings.

Qualifications

• Degree in computer science or engineering,
• Experience in Banking,
• 3+ years’ experience in information security or information risk management,
• Good command of English,
• Solid knowledge of the regulations (BDDK, KVKK, PCI DSS, COBIT, SWIFT etc.) and best security practices (e.g., NIST, CIS, ISO),
• Experience in secure SDLC processes,
• Knowledge in application security principles (OWASP etc.),
• Knowledge in vulnerabilities and threat analysis (ATT&CK MITRE etc.),
• Knowledge in Firewalls, SIEM, Proxy, DLP, Antivirus, APT systems,
• Excellent interpersonal skills to make the Bank as security & data-driven.