► Preparation of yearly internal IT Audit plan based on internal risk assessment and requirements of relevant BRSA legislation.► Management and execution of COBIT and legislation based IT audit engagements. Said legislation includes BRSA IT Norms Communique, Support Services Regulation, Internal Systems Regulation and Penetration Testing Circular.► Management of financial and operational audit work executed for banking processes and first level review of audit reports.► Preparation of quarterly Internal Audit Activity Report which is required to be submitted to Audit Committee, Board of Directors and BRSA.► Preparation of the Internal Audit section of the Management Declaration as well as coordination of management declaration reporting through correspondence with Internal Control, Risk Management and Compliance departments.► Participation to Audit Committee meetings. Said participation brings responsibility of presenting highlights of audit reports and activities of Internal Audit within related period.► Review of the BankPozitif internal documentation including policies, procedures and workflows and submit opinions for consultancy purposes before their circulation.► Participation to Information Security Committee meetings as an observer.► Participation to Support Services working group.► Coordination of the external IT and banking processes audit performed by the independent audit company for BankPozitif and JSC BankPozitiv Kazakhstan.► Maintain continuous coordination with international audit teams of the main shareholder Bank Hapoalim.► Monitor legislation changes to assess their effect on internal audit work plan and procedures.► Management of the Internal Audit Department recruitment process.► Goal definition, performance review and assessment of Internal Audit team members. ► Acting as the representative of the Internal Audit Head in his absence.

Key assignments in Ernst & Young include the following:► COBIT based IT audits in large and international banks within the scope of IT audit regulation mandated by Banking Regulation and Supervision Agency (BDDK). ► IT advisory for the establishment phase of a new-comer Bank to Turkish banking sector.► Financial audit - IT integration engagement in one of the biggest telecommunications company for over two years.► SOX consultancy project in a large mobile telecommunications company in Turkey which covers a range of different IT systems and network elements.► ISO/IEC 27001 information security compliance assessment for a company from banking sector.► IT Risk Management institution project of the one of the major banks in Turkey as project coordinator and high level adviser.► IT audits in numerous companies from different industries which include three projects in Athens, two in Amsterdam and one in Moscow.► Managed an advisory project regarding institution of the internal control environment which was performed at one of the biggest multinational automotive companies operating in Turkey.► Performed current state analysis and strategic prioritization identification for a company from government sector which is operating through electromechanics industry. Engagement includes delivery of current state analysis report, identification and documentation of strategic priorities and projects and strategic road-map preparation.► Integrated audits within the scope of Sarbanes-Oxley law in several industries.► IT due diligence engagements in financial services industry► Supporting training programs delivered to participants from several companies on the following topics: o IT audit basics o Internal control environment o Operating systems auditing (e.g. Microsoft Windows Server, Unix, Linux, AS/400) o Database systems auditing (e.g. Microsoft SQL Server, Oracle)

Worked as first year Senior, second year Senior and Supervisor at Risk Advisory Services

Worked as first year Assistant and experienced Assistant at Technology and Security Risk Services