Senior Information Security Specialist

About the role

iyzico is looking for a Senior Information Security Specialist to lead the protection of its payment platform and related services. You will work closely with cross‑functional teams to design, implement and monitor security controls that safeguard the network, data and compliance posture.

Key responsibilities

• Collaborate with Infra, Software, Compliance and Legal teams to implement proactive security measures.
• Develop and execute a comprehensive plan to secure the iyzico network.
• Document security incidents, assess impact and produce post‑mortem reports.
• Run phishing and information‑security awareness campaigns and report results to the Information Security Manager.
• Monitor assets for breaches, vulnerabilities and attacks using relevant security solutions.
• Assist the Information Security Manager in rolling out updated policies and procedures.
• Support compliance activities for PCI DSS, EU GDPR, SOX and related regulations.
• Plan and coordinate patch‑management for internal and third‑party systems.
• Provide evidence for local, global and third‑party audits.

Required profile

• Bachelor’s degree in Engineering, Information Systems, Information Security or Cyber Security.
• 4–5 years of experience in a similar information‑security role.
• Strong understanding of security solutions such as IDS/IPS, NDR, EDR, DAM, SIEM, IAM and DLP.
• Experience creating security controls, use cases and detection rules.
• Proficiency in Python for scripting and automation.
• Knowledge of information‑security standards and legislation.
• Experience in the financial‑services or payment‑industry sector is a plus.
• Relevant security certifications (e.g., CISSP, CISM) are desirable.

Required skills

• IDS/IPS
• NDR
• EDR
• DAM
• SIEM
• IAM
• DLP
• Python programming
• Security control development (use cases, detection rules)
• Patch management
• Compliance frameworks (PCI DSS, GDPR, SOX)