Information Systems Internal Control Officer

About the role

ICBC Turkey is seeking an experienced professional to join its Internal Control and Compliance Department. The role focuses on controlling information systems activities across the bank and its subsidiaries, ensuring compliance with regulatory and security standards.

Key responsibilities

• Control and monitor information systems processes, conduct general controls, and prepare internal control reports.
• Assess effectiveness of IS controls such as data security, access management, change management, backup, and business continuity.
• Identify security risks, control deficiencies, and non‑compliance issues, and track remediation actions.
• Ensure compliance with regulations from CBRT, CMB, and the Turkish Data Protection Authority.
• Monitor third‑party SDLC controls, code quality, and security scan results.
• Evaluate cybersecurity controls and provide recommendations.

Required profile

• Bachelor’s or master’s degree in Computer Engineering, Software Engineering, Information Systems or related field.
• At least 5 years of experience in IS internal control, audit, or governance.
• Knowledge of BRSA regulations and standards such as COBIT, ITIL, ISO 27001, ISO 22301.
• Advanced proficiency in English.

Required skills

• Familiarity with COBIT, ITIL, ISO 27001, ISO 22301.
• Certifications such as CISA, CISM, CISSP, ISO 27001 Lead Auditor (preferred).
• Data analytics and reporting skills, including SQL.