Founded in 1979, today Aras Kargo serves its customers through a network of 14 regional directorates, 27 hubs, nearly 1.000 branches, a fleet of over 5.000 vehicles and 16.000 employees completing 1 million deliveries per day on average, making it the leading parcel delivery company in Turkey with the broadest network. The company took its innovative vision in the industry one step further with its 2020 merger with Austrian Post, leading to global and innovative projects. With its dedication to promoting happiness and making a difference with its range of services, Aras Kargo continues to operate as the top brand in industry using its innovative business model, combining technology with highly-skilled workforce. (Headquarters in Kavacik-Beykoz, Istanbul)

We are expanding our security capabilities and looking for an Information Security & Security Operations Specialist to join our small but highly capable security team. This role will be a significant contributor building a cybersecurity posture for the organization. Will handle governance, compliance and operational security in a dynamic, startup-style environment backed by enterprise resources.

What You’ll Do

Governance, Risk & Compliance

• Lead and maintain ISO 27001 and NIS2 compliance programs.
• Develop, implement, and maintain information security policies, procedures, and guidelines.
• Coordinate internal and external security audits and assessments.
• Support risk management, vendor assessments, and security awareness training.
• Ensure business continuity, perform disaster recovery tests in collaboration with stakeholders.

Technical Security Operations

• Operate and maintain SIEM, XDR, and log management platforms.
• Monitor and respond to security alerts and incidents.
• Conduct vulnerability management and coordinate remediation.
• Participate in penetration testing activities (internal & external) and coordinate findings remediation.
• Contribute to disaster recovery (DR) and business continuity planning, including scenario testing and tabletop exercises.
• Assist in incident response planning and execution.

What We’re Looking For

• Proven experience in network security, information security, audit, and compliance.
• Strong working knowledge of ISO 27k Certifications and NIS2 directive.
• Apply and maintain security benchmarking standards (e.g., CIS Benchmarks, NIST CSF, ISO 27002, OWASP ASVS) across systems and infrastructure.
• Experience with SIEM, XDR and SOAR or related security tools.
• Understanding identity access management monitoring.
• Experience participating in security testing and resilience exercises.
• Ability to balance technical problem-solving with governance and process work.
• Ability to take ownership of security initiatives and deliver measurable results.
• Strong collaboration skills, with the ability to work effectively across multiple teams and stakeholders.
• Excellent communication skills in English.

Nice to Have

• Security certifications (CISSP, CISM, ISO 27001 Lead Implementer/Auditor, CompTIA Security+).
• Experience in logistics, supply chain, or cargo sectors.

If you’re ready to make a real impact in a growing security team, we’d love to hear from you.

You may visit the link to reach our data privacy policy: https://www.arasdx.com/kvkk/İşe%20Alım%20Süreçlerine%20Yönelik%20Aydınlatma%20Metni.pdf