Information Security Manager (Risk & Compliance) – Hybrid

About the role

Ticimax, a Turkey-based e-commerce platform founded in 2005, is looking for a Risk, Compliance and Information Security Manager. The role ensures that the company's software products are secure and compliant with relevant regulations, managing penetration testing, vulnerability assessment and certification processes such as PCI DSS and ISO 27001. The position is based in Ataşehir and works in a hybrid format.

Key responsibilities

• Manage PCI DSS (Service Provider Level 1) and ISO 27001 compliance and certification processes
• Analyse security vulnerabilities and propose effective technical and organisational controls
• Plan and coordinate internal and external penetration tests and follow up on remediation
• Perform regular vulnerability assessments using tools such as Nessus and Qualys
• Conduct risk assessments and prepare corrective action plans
• Use SIEM and GRC tools for monitoring and reporting
• Prepare for audits and manage relevant documentation
• Raise awareness across the organisation on compliance and security best practices

Required profile

• At least 3 years of experience as an Information Security Manager or in a similar role
• Experience in secure software development practices
• Familiarity with remediation follow-ups after penetration tests
• Relevant certifications such as OSCP, CEH, ISO 27001 Lead Auditor or CISA
• Full professional proficiency in English

Required skills

• Solid understanding of PCI DSS, ISO 27001 and ISO 42001 frameworks
• Hands-on experience with vulnerability scanning tools (Nessus, Qualys) and SIEM platforms
• Familiarity with GRC systems and compliance reporting
• Strong documentation, audit preparation and analytical skills

Onboarding takes place in person at the office in Kozyatağı Ataşehir Allianz Tower for the first two months; afterwards the work is hybrid, with attendance at the office twice per week.