Sermet Soykan Email & Phone Number

Istanbul, Turkey

Istanbul, Turkey

London, Gb

Managing Cyber Security Risk: Spearheading the strategic management of cyber security risk for Vodafone Turkey and its group companies. Implementing effective risk management frameworks and controls to safeguard critical assets and systems.Coordinating Compliance Activities: Orchestrating and overseeing compliance activities for ISO 27001, PCI DSS, SOX, group policies, local regulations, and the Presidency Information and Communication Security Audit mandated by Turkish regulations. Ensuring adherence to these standards through comprehensive assessments, audits, and continuous improvement initiatives.Leading Supplier Cybersecurity Risk Management: Taking the lead in managing supplier cybersecurity risk, including evaluating and assessing the security posture of external vendors. Collaborating closely with suppliers to establish and maintain robust security measures.Timely Corrective Action Management: Monitoring and driving the timely remediation of corrective actions arising from internal/external audits or self-identified issues. Ensuring that all corrective actions are completed within the required timeframe and meet the desired level of quality.GRC Solution Management: Managing the Governance, Risk, and Compliance (GRC) solution, overseeing its implementation, configuration, and maintenance. Collaborating with stakeholders to identify and implement necessary enhancements aligned with evolving requirements.

New York, New York, Us

Tracking and Ensuring Corrective Action Remediation: Diligently tracking and overseeing the remediation of corrective actions, whether self-identified or raised by internal/external audits. Ensuring that all issues are addressed in a timely manner and with the appropriate level of quality, mitigating risks and maintaining compliance.Internal/External Technology Audit Management: Handling all interactions with internal and external technology audits, including deliverables management, audit fieldwork, business monitoring, and meetings. Providing accurate and timely data for risk and control activities/requests, effectively collaborating with auditors to support comprehensive assessments.Regional Risk Management Support: Offering ongoing support to the regional risk management team, providing valuable insights, and contributing to the overall risk management framework. Performing gap analyses and verifying the update of documentation and processes, aligning with regulatory requirements such as the Banking Regulation and Supervision Agency (BRSA) regulations.Information Security Awareness: Increasing awareness of information security within the Technology team, promoting a culture of security and best practices. Proactively educating team members on relevant information security guidelines and requirements.Annual Risk Assessment and Guidance: Initiating and facilitating the annual risk assessment process, providing guidance to technology stakeholders as they assess their risks. Project Risk Assessment and Advice: Assessing project risks and advising on suitable countermeasures, ensuring that potential risks are identified and appropriately managed throughout the project lifecycle. Collaborating with project teams to implement necessary controls and measures.Change Advisory Board (CAB) Participation: Serving as a member of the Change Advisory Board, ensuring compliance with local and global change management procedures.

İstanbul, Ümraniye, Tr

Conducting security controls on bank’s information systems. Coordinating interactions with internal and external auditors. Following up corrective actions in order to be completed on time. Giving guidance to technology teams on local regulation and bank's policies and procedures.

Performing IT audits to ensure that bank’s IT systems are managed in accordance with banking regulations and corporate standards. Following up reported issues are closed on time. Managing Internal Control Unit’s intranet site and developing programs for this website by using asp.net and Access.

Associate'S Degree, Justice

Master Of Science - Ms, İstatistik Ve Bilgisayar Bilimleri

Ms, Information Tecnologies And System Management

Bachelor, Electronics Engineering