Alper Torun, Cisa, Cism Email & Phone Number

Ataşehir, İstanbul, Tr

Ataşehir, İstanbul, Tr

*Aligning Information Security Strategy with Business Strategy. Preparing Information Security strategic plan and road map. *Developing and directing the implementation of security standards (web application, mobile application, container, CI/CD pipeline, DevOps and server security standards) and best practices for the organization. *Documenting all security standards, policies, controls and encouraging activities for security awareness. *Ensuring compliance with regulations related to GDPR-KVKK, BDDK, SWIFT, PCI DSS, ISO/IEC 27001 etc. *Guiding and preparing IT teams for audits. Following up the action plan's progress and ensuring that recommendations are implemented in a timely manner. *Performing requested ad hoc audits, security consultancy / security risk assessments and developing mitigation strategies to prevent future incidents. *Preparing Information Security Awareness Program in the organization.*Following up necessary regulations and technologies.

Ataşehir, İstanbul, Tr

Ataşehir, İstanbul, Tr

Ataşehir, İstanbul, Tr

Responsibilities and achievements:• Yearly evaluation of internal and external risks which include control weaknesses on different IT processes and determination of auditable units.• Prioritization and categorization auditable units based on the risk points calculated by the Board Management and IT Auditors and creation of the annual audit plan.• Continue the work of audit within the scope of the annual audit plan• Ensuring confidentiality, integrity and availability of corporate data,• Advising on institution of necessary controls to optimize IT processes,• Auditing IT applications and processes with the adoption of international audit standards and Code of Ethics,• Maintaining and improving professional competency via delivering value to our organization.

Ataşehir, İstanbul, Tr

As the leader of the Halkbank IT Audit team, I am in charge of:• Evaluating annually internal and external IT risks which include control weaknesses on different IT processes and determination of auditable units.• Prioritizing auditable units based on risk assessments and preparing annual IT audit plan which approved by Board of Directors,• Coordinating internal IT audit teams and their tasks based on approved annual IT audit plan,• Continue the work of audit within the scope of the annual IT audit plan,• Supporting IT teams in the remediation of deficiencies with respect to IT standards and best practices, advising on institution of necessary controls to optimize IT processes,• Driving the implementation, documentation, maintenance and improvement of the IT control process based on COBIT and ITIL policies and processes,• Ensuring effective preparation and implementation of the IT Compliance standards,• Ensuring confidentiality, integrity and availability of corporate data,• Assisting with inquiries from Legal and regulatory entities and external IT audits, coordinating and facilitating responses to inquiries for IT information.• Auditing IT applications and processes with the adoption of international audit standards and Code of Ethics,• Maintaining and improving professional competency via delivering value to our organization.

• In charge of Network Management and I am second head manager of computer center. I was responsible for managing the MS Servers, Active Directory, MS Exchange Server, backups, network and give support to employees.• As a Microsoft .Net Developer, I am responsible of all of the in-house developed applications and web sites. Those web sites includes customer and sales people portals to customer oriented pages. Also responsible for all of the server environments and domains.• Determining the problems which had occurred on the server’s and also employee PC’s, reporting them, and creating solutions.

A part time job as a web designer and developer for TRNC's only e-commerce site.Responsibilities and achievements:• Assisted the Main Designer who was managing the site.• Handled incoming telephone calls from customers and other companies that have departments on the e-commerce portal.• Determining the problems which had occurred on the site, reporting them, and creating solutions. • Preparing personal or organizational web sites, collecting info.

Amsterdam, Noord-Holland, Nl

• Assisted the Network Manager and Second Head Manager who was responsible for managing the MS Servers, network and give support to employees.• Gained knowledge on IBM software Lotus Notes (server and client side) and IBM Tivoli (System Management Server). Also gained knowledge on MS Server environment and Domains.• Determining the problems which had occurred on the servers and clients, reporting them and creating solutions.• Prepared reports for CC regulations.

Bsc, Computer Engineering

Doctor Of Philosophy (Phd), Information Systems

Sciences