Bilgi Güvenliği Uzmanı (3)

Since 1999, when we set out as Turkey’s first digital broadcasting platform, we’ve been bringing sports and entertainment to millions, continuing to inspire along the way. Since 2016, with the global strength of beIN MEDIA GROUP, we’ve been moving forward with innovation at our core—always one step ahead.

At Digiturk, we build together and draw strength from one another. We care, we listen, and we grow together. We truly experience the power of being a team and dreaming together. We value not only our work, but also each other. We share leadership and never stop inspiring.

If you’d like to be “together” with us on this journey, your place is ready!

#Digiturk’teBirAradayız

IDEAL PROFILE

• Bachelor's degree in Engineering, Computer Science, Information Systems, Cybersecurity, or a related discipline.
• Minimum 3 years of professional experience in Information Security, Cybersecurity, IT Security, or a similar role.
• Strong knowledge of Windows, Linux, and Unix operating systems and their security architectures.
• Experience in Information Security and Cybersecurity management.
• Solid understanding of Network Security, Firewalls, IDS/IPS, VPN, NAC, and Security Infrastructure Management.
• Knowledge of telecommunications technologies, communication protocols, and telecommunications security concepts.
• Experience with Windows Server Security, Active Directory, Group Policy, and identity management.
• Experience with Linux/Unix hardening, privilege management, and secure system administration.
• Strong understanding of network protocols and secure network architecture.
• Knowledge of data protection, encryption technologies, identity and access management (IAM), authentication, authorization, and access control mechanisms.
• Experience with vulnerability management, security assessments, risk analysis, and remediation processes.
• Familiarity with Information Security Management Systems (ISMS) based on ISO/IEC 27001.
• Knowledge of regulatory and compliance frameworks such as KVKK,GDPR, PCI DSS, NIST Cybersecurity Framework,CIS Controls, and relevant Turkish regulatory requirements (e.g., BTK and Presidential Information & Communication Security Guide).
• Understanding of Secure SDLC, DevSecOps, Cloud Security, virtualization, and container security principles is considered an advantage.
• Experience with SIEM, Endpoint Security (EDR/XDR), Data Loss Prevention (DLP), Privileged Access Management (PAM), Web Application Firewall (WAF), Email Security, and Security Monitoring solutions is preferred.
• Relevant professional certifications such as CEH, CompTIA Security+,ISO/IEC 27001 Lead Implementer, ISO/IEC 27001 Lead Auditor, or equivalent information security certifications are preferred.
• Good command of written and spoken English.
• Strong analytical thinking, problem-solving, communication, and stakeholder management skills.

MAIN RESPONSIBILITIES WILL INCLUDE

• Analyze the organization's information security requirements and identify security risks.
• Collaborate with internal and external stakeholders to implement appropriate security controls and ensure timely risk mitigation.
• Monitor security advisories, manage security incidents, vulnerabilities, and remediation activities.
• Contribute to maintaining the confidentiality, integrity, and availability (CIA) of information assets.
• Develop, implement, and maintain information security policies, standards, procedures, and guidelines to ensure sustainable security, risk, and compliance management.
• Perform information security risk assessments, define risk treatment plans, and monitor remediation activities.
• Maintain compliance with BTK, CB-CDO, CyberSecurity Law 7545,KVKK (Turkish Personal Data Protection Law), GDPR,PCI DSS, ISO/IEC 27001, regulations, and the Presidential Digital Transformation Office Information and Communication Security Guide, including periodic audits and compliance reviews.
• Ensure the continuity and effectiveness of enterprise information security infrastructure and recommend security improvements aligned with business objectives.
• Manage Information Security Management System (ISMS) processes in accordance withISO/IEC 27001, including risk assessments, policy development, documentation, internal audits, and certification readiness.
• Ensure the implementation of technical and administrative controls for personal data protection and monitor compliance with privacy regulations.
• Coordinate security controls and audit preparation activities in accordance with the Turkish Presidential Information and Communication Security Guide.
• Support Business Continuity Planning (BCP) and Disaster Recovery (DR) initiatives by implementing and maintaining information security controls.
• Define and enforce information security requirements for new applications, infrastructure, cloud environments, and DevOps/CI-CD projects (Secure SDLC / DevSecOps).
• Conduct security reviews and risk assessments for new systems, applications, and technology projects.
• Manage security exception requests and risk acceptance processes while coordinating the required approval workflows.
• Participate in internal and external security audits, vulnerability assessments, and compliance assessments.
• Work closely with IT, Infrastructure, Development, and Business teams to integrate security best practices across projects.
• Monitor security controls, recommend continuous improvements, and support security governance initiatives.
• Deliver and coordinate periodic security awareness and cybersecurity training programs for employees.
• Support vulnerability management activities by tracking remediation efforts and ensuring timely closure of identified findings.
• Assist in third-party/vendor security assessments and supplier risk management processes.
• Prepare security metrics, compliance reports, and management presentations to support governance and decision-making.

ADVANTAGES WAITING FOR YOU AT DIGITURK

• Private Health Insurance with consideration for your family,
• Life Insurance valuing your life,
• Employer contribution to the Private Pension System (BES),
• Happy Birthday! Birthday leave and gift voucher,
• Periodic health leave supporting the well-being of our female employees,
• Nursery support for our female employees who are mothers,
• Gift voucher sharing the joy of the holiday,
• Global talent programs offering development opportunities with different cultures,
• Social events and employee activities where we have fun and achieve together,
• Dietitian support and on-site laboratory services supporting a healthy lifestyle,
• Free TOD membership, offering beyond sports; domestic and international films, series, documentaries, and live TV broadcasts together,
• Partner institution discounts extending your privileges beyond working life,
• Opportunity to closely experience the excitement of the media world; watching matches on-site, meeting your favorite names, and much more