Information Security Management / Security Engineer

About the role

Join Garanti BBVA Technology’s Corporate Information Security team to define, own and continuously improve the information security strategy aligned with business objectives. You will be responsible for ensuring compliance, designing security controls, and driving security awareness across the organization.

Key responsibilities

• Define, own and evolve the Information Security strategy in line with business goals.
• Ensure compliance with regulations (BDDK, COBIT, SOX, PCI DSS, KVKK, ISO27001) and monitor internal processes.
• Determine security requirements for data, cloud and infrastructure projects.
• Create and maintain internal security policies, procedures and governance frameworks.
• Coordinate security awareness training and manage third‑party security governance.
• Design, review and implement security controls and solutions across network, cloud and AI environments.

Required profile

• BS in Computer Engineering, Electrical/Electronics Engineering or equivalent.
• At least 6 years of hands‑on experience in information and infrastructure security.
• Strong knowledge of security governance models and relevant legal/regulatory standards.
• Experience with cloud security architectures and AI security risk controls.

Required skills

• TCP/IP and networking concepts.
• Infrastructure hardening, firewall, WAF, DDoS, DNS, NAC, proxy, switch and router technologies.
• Security controls design and review.
• Cloud security principles and best practices.
• AI, GenAI, LLM architecture security, model risk, RAG, Vector DB security.
• Regulatory frameworks: BDDK, COBIT, SOX, PCI DSS, KVKK, ISO27001.
• Relevant certifications (CISA, CISM, CISSP, ISO27001, TOGAF) preferred.

What we offer

• Flexible working hours and hybrid office environment (Istanbul/Ankara).
• Onboarding buddy and personalized development plan.
• Career development with clear path, local and global opportunities.
• Access to online courses (Kampüs Garanti BBVA, Coursera, LinkedIn Learning).
• Private health and life insurance, birthday off day, well‑being program.
• Sabbatical leave after seven years of service.