Information Security Specialist

MARUBENİ DAĞITIM VE SERVİS ANONİM ŞİRKETİ

Marubeni Dağıtım ve Servis A.Ş. operates as the Turkish distributor of several global brands under Japan-based Marubeni Corporation, which has approximately 52,000 employees across 498 consolidated companies and 126 locations in 68 countries.

Marubeni Dağıtım ve Servis A.Ş. provides sales and after-sales services for Komatsu, Volvo Trucks, Bomag, Tadano, Dieci, and Crown. The company also offers rental services under the Platinum Rent brand and second-hand sales and purchasing services for construction equipment and forklifts under the Platinum Used brand.

Marubeni Dağıtım ve Servis A.Ş. delivers not only products but also value-added after-sales services and solutions to its business partners across various industries, including construction, mining, marble, logistics, manufacturing, and energy.

We are looking for an “Information Security Specialist” to join our growing and continuously evolving organization at the Marubeni Dağıtım ve Servis A.Ş. Headquarters in Ataşehir, Istanbul.

About the Job

This role is responsible for ensuring that information security processes align with ISO 27001 standards, Marubeni Group governance requirements, and industry best practices. It involves analyzing and reporting on the security, performance, and risks of Information Technology systems and processes in line with corporate objectives, as well as planning appropriate improvement initiatives. The position is also responsible for conducting corporate information security awareness programs.

Job Description

• Monitor information security incident management and breach notifications; support analysis efforts and the implementation of preventive measures.
• Manage relationships with security vendors, including procurement, licensing, and contract coordination.
• Manage and coordinate penetration testing, vulnerability management, and cyber threat intelligence processes; track necessary preventive actions and report on outcomes.
• Monitor, oversee, and report on technologies such as DLP (Data Loss Prevention), data classification, PAM (Privileged Access Management), SIEM (Security Information and Event Management), and SOC (Security Operations Center).
• Coordinate external audits related to Information Technology and information security; track audit findings and support corrective action projects.
• Ensure that information security policies, procedures, and guidelines are kept up to date.
• Monitor relevant legal requirements, regulations, and compliance obligations, and implement necessary updates.
• Develop, track, and report on information security awareness programs.
• Perform periodic checks within the scope of information security management and take necessary actions.
• Play an active role in business continuity and disaster recovery initiatives, and coordinate related testing.
• Managing secure software development processes.
• Ensuring the structuring of the IT Service Desk, and supporting its management and continuous improvement.
• Ensuring the regular monitoring, measurement, and reporting of SLA (Service Level Agreement) performance; managing improvement initiatives.
• Supporting the execution of IT service management processes, including incident management, request fulfillment, problem management, and change management.
• Conducting process maturity assessments to enhance IT service quality and actively participating in improvement projects.
• Supporting the operation of IT asset management and configuration management processes.

Qualifications

• Proficiency in English (written and spoken).
• Bachelor’s degree from a four-year university program (preferably in Computer Engineering, Electronics Engineering, or Information Technology).
• At least 2–3 years of experience in the field of information security.
• Competent in information security processes and practices; stays up-to-date with emerging technology trends.
• Knowledgeable in pam management, as well as access security (PAM).
• Experienced in Security Operations Center (SOC) processes, operations, and technologies (SIEM, SOAR, incident monitoring, and incident response).
• Proficient in security products and technologies, such as firewalls, IPS, EDR, web security, cloud security, DLP, data discovery, data classification, and vulnerability scanning tools.
• Knowledgeable regarding network security processes and methodologies.
• Possesses strong communication, coordination, monitoring, and problem-solving skills; analytical and proactive.
• Experienced with standards such as ISO/IEC 27001, ITIL, CIS, and KVKK (Personal Data Protection Law).
• Preferably holds a recognized information security certification (e.g., ISO 27001 Lead Auditor/Internal Auditor, CISSP, etc.).
• Experienced with request management (ticketing) and ITSM tools ( ManageEngine, Ivanti, etc.).