Head of Internal Audit & IT Audit

About the role

Freedom Yatırım Menkul Değerler A.Ş., the brokerage arm of Freedom Holding, is expanding its operations in Turkey and the MENA region. We are seeking an experienced Head of Internal Audit & IT Audit to lead both internal and IT audit functions across the organization.

Key responsibilities

• Develop, manage and execute an annual risk‑based Internal Audit Plan aligned with regulatory requirements and strategic objectives.
• Lead operational, financial, compliance and IT audit engagements across all business units, including head‑office process audits.
• Assess internal controls, governance processes and risk‑management practices for both business and IT activities.
• Prepare comprehensive audit reports, communicate findings to senior management and monitor corrective actions.
• Support regulatory inspections and external audits, ensuring compliance with CMB/SPK, Borsa İstanbul, Takasbank, MASAK and other regulations.
• Conduct investigations of operational irregularities, fraud indicators and policy violations.
• Develop and execute a risk‑based IT Audit Plan covering infrastructure, applications, cybersecurity, information security and IT operations.
• Review cybersecurity controls, business continuity, disaster recovery and IT governance frameworks.

Required profile

• Bachelor’s degree in Business Administration, Finance, Economics, Accounting, Information Systems, Computer Engineering or a related field.
• Minimum 10 years of experience in Internal Audit or IT Audit, preferably within a brokerage, bank or financial institution.
• Strong knowledge of Capital Markets Board (CMB/SPK) regulations and brokerage operational processes.
• Experience auditing brokerage operations, capital markets, treasury, settlement & clearing, custody and trading activities.
• Capital Markets Board (CMB/SPK) Information Systems Independent Audit License or equivalent (CISA) required.
• SPL Level 3 (Advanced Level License) required or willingness to obtain it.

Required skills

• Cybersecurity
• Information security
• IT governance
• CISA certification
• SPL Level 3 certification

What we offer

• Leadership role shaping regional growth strategy.
• Performance‑based incentive plans and development opportunities.
• Direct engagement with senior leaders and recognition for results.