About:

Yapı Kredi Technology is a technology company that produces innovative, high quality, and high value-added products and solutions in the finance sector. With more than 2,000 employees, it aims to create products that will shape the sector for Yapı Kredi Bank and to be the undisputed leader in the field of technology by using modern architectural systems and cloud technologies. It also contributes to the development of new and exemplary products for the sector by using natural language processing, machine learning, artificial intelligence, and data mining technologies with its R&D team.

Who We Are:

At Yapı Kredi Technology, we research with passion, wonder as we learn, and implement innovations that shape the future together. We take responsibility from the first day with our expert colleagues and work with all our strength for pioneering applications. We make quick decisions and take action. We quickly adapt to innovations and changes.

What Do We Offer:

📌 Opportunity to work in hybrid model

💻Opportunity to work in Koç Group Community Companies' offices

🌴Chance to discover the natural wonders and amenities offered at Koç Toplululuğu Spor Kulübü (KTSK)

🚀Career development opportunities in a structured technology career path

💫 Opportunity to benefit from BizClub and KoçAilem privileges exclusive to Yapı Kredi Technology employees

🤝Company-contributed individual retirement insurance

🎂 Birthday off day.

Job Description

• Develop Information Security Policies, processes and procedures,
• Develop the information security risk and control framework,
• Develop security assurance metrics (SAM), and perform security measurement, including measuring policy compliance and effectiveness,
• Prepare security executive reporting,
• Ensure compliance with security requirements, laws and regulations (GDPR, CIS, BDDK, PCI DSS, Swift, KVKK, 5651, Dora),
• Conduct gap assessments in line with the security regulations to which it is bound,
• Determine the maturity level, define security needs and carry out follow-up coordination,
• Perform root cause analysis on security audit findings and carry out follow-up coordination,
• Implement supply chain security (pre-contract, new contract, contract renewal) , third party/vendor security risk assessments,
• Ensure security awareness and training,
• Support asset classification and data protection.

Qualifications

• BS or MS degree in Computer Science, Engineering or a related technical field,
• Solid knowledge of relevant regulations (BDDK, PCI DSS, SWIFT, KVKK, GDPR, Cobit, ITGC etc.) and security best practices (e.g. NIST, ISO, ISEA),
• Certification(s) including but not limited to (CISSP, CISM, CISA) is preferred,
• A team player who takes pride in and facilitates the sharing of knowledge,
• Ability to work creatively and analytically in a problem-solving environment,
• Desire to work in an information systems environment,
• Excellent written and verbal communication and interpersonal skills,
• Ability to build relationships and communicate effectively to positively influence peers and other stakeholders,
• Good command of English, both written and spoken.

Candidate Selection Process:

Our recruitment process for all positions typically encompasses technical interviews, director assessments, competency evaluations, and personality tests. We will extend our offer to candidates who have successfully completed a positive evaluation process.

If you would like to get to know more about Yapı Kredi Technology, you can follow us! 🚀

https://www.ykteknoloji.com.tr

https://medium.com/yapi-kredi-teknoloji

6698 sayılı Kişisel Verilerin Korunması Kanunu kapsamında kişisel verilerinizin işlenmesinden doğan haklarınıza ve bu konudaki detaylı bilgiye https://kariyerim.yapikredi.com.tr/Account/StaticKvkk adresinde yer alan aydınlatma metnimizden ulaşabilirsiniz.