Information Security Manager

About the role

Anadolu Efes is seeking an experienced Information Security Manager to lead governance, strategy, risk management and alignment with the AG group. The role involves building a robust security program, guiding teams, and ensuring compliance with global standards and regulations.

Key responsibilities

• Lead information security governance, committees and decision‑making mechanisms.
• Develop, maintain and execute the information security and cybersecurity strategy aligned with business objectives and AG standards.
• Build and continuously improve the security program and control framework based on ISO/IEC 27001, NIST and other recognized frameworks.
• Conduct risk and maturity assessments, report risks, KPIs and incidents to senior management, and own the security budget.
• Coach and develop the security team, foster collaboration with IT, Legal, Internal Audit and other business units.
• Oversee compliance with KVKK, GDPR and Capital Markets Board requirements, and manage incident response and cyber‑resilience processes.

Required profile

• Bachelor’s degree in Computer Engineering, Information Systems, Information Security, Industrial Engineering or related field.
• Minimum 10 years of experience in information security, cybersecurity or IT risk management, with at least 5 years in a leadership role.
• Professional certifications such as CISSP, CISM or CISA are strongly preferred.
• Proven experience in governance, risk management, regulatory compliance and security operations within a matrix or multi‑company environment.
• Excellent written and spoken English and strong stakeholder‑management skills at executive level.

Required skills

• Security frameworks: ISO/IEC 27001, NIST.
• Professional certifications: CISSP, CISM, CISA.
• Cloud security, AI security and OT security concepts.
• Vulnerability management, access management and security monitoring.
• Security architecture and secure development practices.