• Preparing and maintaining information security policy and procedures, business continuity policy and plan as part of BCM, information classification methodologies • Implementing and maintaining ISO 27001 Information Security Management System (ISMS)• Implementing security awareness programs• Coordinating and managing projects related with Internal and External Information Security Compliance Requirements (KVKK, SPK-Capital Markets Board, etc.)• Coordinating and following up internal and external audits (COBIT, ISO27001, SPK-Capital Market Board Information Systems Audits, etc.) and penetration tests• Providing assessment and advice on IT and information security to related parties including Information Security Committee• As a member of Enterprise Architecture Committee, evaluating architectural components of projects and have a role in decision making• Coordinating and managing Cyber Security Incidents • Leading the security team responsible for stock exchange IT and Information Security operations • Developing annual Information Security Plans • Planning, implementation and management of IT Security projects including; → Secure infrastructure design → Intrusion detection and prevention system implementation (IDS/IPS) → Design and implementation of Identity and Access Management (IAM) System → Security Incident and Event Management (SIEM) systems → Deployment and management of OTP and both SSLVPN and Site-to-Site VPN Systems, load balancing systems, → Design and implementation of monitoring infrastructure for security systems → Implementation and management of Unstructured data governance system

• Responsible for analysis of network and host based activity.• Worked on Windows and Unix/Linux based operating systems. Examined details of the operating systems and prepared security procedures for them. Also, responsible for maintenance and application of these security procedures by working with related IT groups.• Responsible for management and audit of Firewall and Intrusion Detection systems, Virus Scanning software and Patch Management operations. • Led the Patch Management Team to be up to date on current patches for different types of systems and to apply necessary patches in a timely manner.• Prepared secure infrastructure for WAN project which will allow authorized remote users (member firms) to access Istanbul Stock Exchange resources over leased lines. This infrastructure contains user authentication, firewall systems and Virtual Private Networks• Defined security levels of IT Assets and worked on performing proper subnetting according to the security levels of the assets by the help of the networking department• Prepared IT Audit Policies• Developed security related reporting programs in PowerBuilder

• Worked as an Analyst/Programmer in the Treasury & Accounting Software project for the Bahrain branch (offshore banking unit) of Yapı Kredi Bank. Taken primary role in the analysis, design and implementation steps of the project. Designed the database model in PowerDesigner and implemented the software in PowerBuilder. Used Sybase as the Database environment• Designed and implemented Client – Server programs in a multinational project with Andersen Consulting. Implemented the programs in C++ and Foundation