Risk Management Specialist - Information Technology

About the role

Paribu, a Turkish crypto asset exchange founded in 2017, is looking for a Risk Management Specialist focused on information technology. You will identify, assess and monitor operational and information systems risks across business and technology processes, and work closely with Information Security, Technology, Operations and Internal Control teams.

Key responsibilities

• Maintain risk inventories, control assessments and key risk indicators to support risk monitoring
• Evaluate risks related to access management, change management, cybersecurity and business continuity
• Assess risks of third-party technology providers and outsourced services
• Monitor operational incidents, security events and loss data, and track corrective and preventive actions
• Review critical technology changes and provide risk assessments
• Collaborate with cross-functional teams to identify control gaps and strengthen risk mitigation
• Prepare regular risk reports and communicate findings, exposures and recommendations to management
• Support regulatory examinations, internal audits and compliance activities related to information systems and operational risk

Required profile

• Bachelor's degree in Computer Engineering, Software Engineering, Industrial Engineering, Management Information Systems or a related field
• 3-5 years of experience in operational risk, IT risk management, information systems auditing, IT risk consulting or information security
• Strong understanding of operational risk methodologies, including RCSA, incident and loss data management and KRI development
• Ability to interpret system logs, monitoring data and basic SQL queries for risk analysis
• Clear communication skills and strong analytical thinking; familiarity with SPK information systems regulations is a plus

Required skills

• Knowledge of IT processes: change management, IAM/PAM, backup and disaster recovery
• Understanding of cloud infrastructure, network security fundamentals and cybersecurity incident management
• Familiarity with IT governance and security frameworks such as COBIT, ISO 27001, ISO 22301 or NIST CSA
• Certifications such as CISA, CRISC, ISO 27001 or ISO 22301 are a plus

What we offer

• Meal allowance via a flexible meal card
• Private health insurance covering employees, spouse and children
• Commuting support and relocation allowance within 15 km of the office
• S.O.S. leave of up to 10 days per year and an extra day off on your birthday
• Language learning support and a budget for personal development and courses
• Well-being platform with mental health support and cultural event tickets
• High-performance work equipment