Sefa Duran Email & Phone Number

Netherlands

The Netherlands

London, United Kingdom

Istanbul, Turkey

Act as information security consultant for multi-faceted projects consisting of various clients across telecommunication, retail, healthcare, media and energy industries. Working in more than one challenging project simultaneously to enhance information security skills in various clients and industries. Some of the skills and competencies are;Information Security Management Systems Implementation:- Develop full information security governance policies, procedures and standards based on NIST, SANS and Deloitte references. (50+ documents)- Support client in complying with IT security standards across PCI-DSS, SANS, NIST, ISO 27001 and Turkey- Data Privacy Protection Regulation frameworks. - Manage and conduct asset based risk assessment for more than 60k+ asset within challenging condition.- Develop information security awareness program for +30k employee.- Analyse and develop KPI for information security program based on NIST SP 800-55.- Prepare client specific OSG - Operational Security Guideline based on CIS Hardening Benchmarks. Data Security & Privacy Transformation Program- Conduct security & privacy assessment with 30+ business units and prepare data inventory.- Develop security & privacy program by providing IT-business alignment.- Define/Draw data flows for critical business process with detailed diagrams- Design and build DLP & SIEM rules according to client’s business process and data flows.- Develop log management model through defining right log resources, log types and log storing model.Information Security Management – Security Governance- Manage penetration testing and finding correction process - coordination of business units.- Prepare RFP for security related device and service procurements to achieve effective budget management.- Arrange necessary preparations for audits.

Foundation of ISACA İstanbul Chapter Student group. Organization of events and trainings on cyber security and information systems auditing.https://www.facebook.com/ISACAStudentIst/http://www.isaca-istanbul.org/team-members/ogrenci-temsilcileri/

Act as project management specialist at PMO-Project Management Office. Mostly responsible for management of SAP, Active Directory and Oracle IDM integration projects. - Manage project score cards for more than 120 project in order to keep track of success factors. (budget – time based) - Prepare weekly/monthly/quarterly baseline reports to senior management. - Advice to software development teams about SDLC foundation principles. - Involve project team coordination activities for any phases. - Prepare SDLC project management procedure as an assistant.

Act as network security consultant, responsible for supporting client consulting, sales management and reporting activities. - Report investigation and case solution for ambiguous points of projects to clients. - Report regular results about Firewall OS bugs and expected patches to Dell HQ, USA - Prepare solution document for technical & non-technical issues such as defence against ransomware (1.st generation, effective monitoring solutions. - Prepare RFP to submit on tender.