Head of Information Security

About the role

Yıldız Holding, a food and snack group founded in 1944 with 80,000 employees and 45 factories, has set up Yıldız Tech to support the digital applications of its group and help e-commerce customers use next-generation technology. Yıldız Tech is hiring a Head of Information Security who will work closely with the Information Security Director, regularly reporting on key initiatives, risks and performance.

Key responsibilities

• Lead the design, implementation and continuous improvement of the enterprise-wide Information Security Management System across the group.
• Proactively identify security risks and implement measures protecting infrastructure and applications from internal and external threats.
• Establish and maintain security policies, standards and best practices for applications, infrastructure and cloud services.
• Ensure compliance with KVKK/GDPR, SOX and PCI-DSS, and lead internal and external audits (COBIT, IT controls) and the resolution of findings.
• Provide security guidance for IT projects and develop KPIs to measure security maturity and compliance effectiveness.
• Drive security and privacy awareness programmes and collaborate with Finance, Legal and Audit to prioritise security investments.

Required profile

• Bachelor's degree, preferably in Computer Engineering, Computer Science, MIS, Mathematics or Statistics.
• At least 8 years of experience in information security governance, cybersecurity product management, risk and compliance or security-focused business/technical analysis.
• CISA, CISM, CISSP or equivalent certification.
• Excellent English and Turkish.

Required skills

• Security frameworks: ISO 27001, NIST, COBIT, ITIL, PCI-DSS.
• Regulatory knowledge of KVKK/GDPR and SPK.
• Building AI agents, workflows and automations with AI-assisted tools.
• MS Office and strong analytical and communication skills.