Senior Manager – Cyber Risk - Entity 2nd Line of Defense

• Nov 2022 - Present

Information Security Manager

• Sep 2021 - Oct 2022

IT Security Risk Manager

• Aug 2020 - Aug 2021

Security Compliance & Risk Manager / Identity & Access Manager

• Jan 2018 - Jan 2020

-Implementation and maintenance of the Information Security Management System (ISMS) based on the ISO/IEC 27000 series standards across Vodafone Turkey Companies, -Implementation and maintenance of compliance with PCIDSS standard across Vodafone Turkey Companies, -Implementation of security risk management program. Leading, planning and conducting security risk assessments, defining and tracking risk remediation actions with risk owners, effective reporting to key stakeholders and upper… Show more -Implementation and maintenance of the Information Security Management System (ISMS) based on the ISO/IEC 27000 series standards across Vodafone Turkey Companies, -Implementation and maintenance of compliance with PCIDSS standard across Vodafone Turkey Companies, -Implementation of security risk management program. Leading, planning and conducting security risk assessments, defining and tracking risk remediation actions with risk owners, effective reporting to key stakeholders and upper management, -Development, implementation and improvement of information security policies and standards for alignment with industry best practices and the emerging threat landscape, -Periodically measuring and improving effectiveness of information security controls, reporting to stakeholders and upper management, -Implementation and Management of Security Governance, Risk, Compliance Framework (GRC) for effective risk management and centralized compliance management, -Design and Governance of Enterprise Access Management processes, -Leading user and role certification process with involvement of appropriate stakeholders and ensuring timely completion, -Ensuring Segregation of Duties conflicts are identified and controls are enforced during access request and certification processes, -Coordinate and conduct information security due diligence of suppliers, -Critical thinking with strong attention to detail and follow up, -Technically competent to contribute towards the preparation and implementation of control processes, procedures and guidelines, in conjunction with company policies and external requirements, -Supporting engagements with internal and external audits to ensure their success, -Ensure user accesses are being regularly reviewed.

Senior Expert Project Manager (CRM&Services)

• Mar 2015 - Dec 2017

- Managing CRM & Services Programs/Projects - Managing Business Intelligence Projects Ongoing Projects: DWH Reengineering, Enterprise Access Management Completed Projects: Mobile TV, Fillbox Bundle,Fixed DWH, Fixed Data Quality

Senior Program/Project Manager

• Sep 2012 - Mar 2015

- Managing ICT projects - Overall direction, coordination, implementation, execution, control and completion of specific IT projects ensuring consistency with commitments and goals Completed Program/Project Examples: Business Process Reengineering, Sesli Fatura, Identity Access Management, Flexi Paketler, Kontratlı Paketlerde BC Değişikliği, Kurumsal Mizanpaj Değişikliği

System Analyst

• Aug 2010 - Aug 2013

Capability Management/Fraud and Collection - Acting as a system analyst in Fraud, Prepaid and Data Retention systems - Acting as a workstream leader in various projects related to the Fraud environment

VAS Rating and Charging Admin

• Jan 2007 - Aug 2010

Application Operations/Billing Charging Operations - Acted as the system admin for VAS Rating Charging systems who is responsible for operating and maintaining system resources, defining campaigns and supporting test departmants. - Acted as the Technical phase leader in VRC related projects.

Product Validation- Test Engineer

• Jan 2005 - Dec 2006

Verified product functionality by creating and executing test cases for different possible call processing, maintenance and robustness scenarios for line gateway MG9K and its interactions with various international IP Succession agents. Verified product functionality by creating and executing test cases for different possible call processing, maintenance and robustness scenarios for line gateway MG9K and its interactions with various international IP Succession agents.

Software Verification Engineer

• May 2005 - Jul 2005

Verified sofware functionality by creating and executing test cases for different possible call processing, maintenance and robustness scenarios for line gateway MG9K and its interactions with various North American AAL1 Succession agents. Completed Projects: WireLAN UA-AAL1 Project Verified sofware functionality by creating and executing test cases for different possible call processing, maintenance and robustness scenarios for line gateway MG9K and its interactions with various North American AAL1 Succession agents. Completed Projects: WireLAN UA-AAL1 Project

Business Analyst

• May 2004 - Dec 2004

Designed user interfaces for Savings Accounts and Money Transfer sections of the E-bank project using IBM Rational Clear Case. Completed Projects: Finansbank Internet Banking Designed user interfaces for Savings Accounts and Money Transfer sections of the E-bank project using IBM Rational Clear Case. Completed Projects: Finansbank Internet Banking