Guzelis

- Responsible for the information security strategy, policy and for the implementation of security road map - Lead and oversee the identification and adaption of security trends and emerging technologies - Communicate effectively with senior management and executive board regarding the information security compliance and security road map as the head of ISSB-Information Security Steering Board - Collaborate closely with legal counsel and data privacy department to achieve the compliance with data privacy regulations - Increase the awareness and understanding about the cyber threats and safe behaviours at all levels in the organisation

- Lead, develop and monitor the Information Security Strategic Roadmap for AvivaSA (Aviva JV). - Evaluate emerging cyber security technologies for adoption within AvivaSA, as well as working closely with Aviva Global Cyber Security Teams for global security projects. - Ensure compliance with global&local regulations and Aviva Global Business Protection Standart. - Serve as single point of contact for all IT related Audit findings and IT risks (risk assessment and risk management) in IT

- Head of Cyber Security Committee; member of Cardtek Execution Committee, Audit&Risk Committee and IT Committee. - Plan and coordinate the execution of cyber & information security programs and projects accross the Group companies. - Build and maintain relationships across the Group Companies to drive information security awareness and compliance. - Responsible for the development, execution and reporting of the strategic plan and long-range strategic initiatives across the Group. - Developing and growing the quality capabilities of the Group companies through the development and deployment of shared standards, processes and best practices including information security & data protection. - Leading meetings with process owners to identify process-related issues and support business improvements. - Management of workflow between the Group companies to ensure proper coordination and efficient calendar management. - Monitoring the relations between the companies, evaluating and proposing alternatives to safeguard the interests of the Group.

IT Divisions directed: - Information Security Management: Development of Information Security Strategy Plan and related policy and procedures for the Bank. Implementing DLP (Data Leakage Prevention) processes and monitoring the suspected data loss activities across the organization. - SW Demand Management: Prioritization and analysis of the software development requests arised by all business departments in the Bank. Coordination between the business departments and IT company. - IT Contract Management: Management of IT Contracts and related SLA's between the Bank and vendors. - Application Support Management: 2nd level support for core banking and related applications.

- Preparation of IT Audit Plan for T.C. Ziraat Bankasi A.S. and its affiliates. Management and coordination of IT Audits, application audits and Banking Processes Audits. - Management of Continous Audit Department. 65 % of the Bank’s embezzlement cases have been detected by Continous Audit. - Review of the work and audit reports of whole IT Audit team (14 IT Auditors). - Developing technical and business training programs for the IT Audit team - Ensuring the compliance with all policies, standards and procedures of the Bank, as well as, those required by the law and government agencies

- Development of IT Audit Methodology and preparation of Risk Control Matrices for the audit of banking processes - Audit of General IT Controls and Application Controls based on CobiT (Control Objectives For Information and Related Technologies) Framework - Audit of banking processes based on Banking Regulation and Supervision Agency’s regulations - Assessment of the effectiveness, efficiency and compliance of internal controls - Performing IT Audit of T.C. Ziraat Bankasi A.Ş New York Branch - Performing IT Audit of Ziraat Bank Macedonia - Performing IT Audit of Fintek A.Ş. based on CobiT (IT Company of Ziraat Bank) - Training of new employed IT Auditors.

Responsible for solving the problems of Europe based telecom operators related to their ATM network infrastructre as level-2 support engineer. Worked with British Telecom (UK), SFR (France), Fastweb (Italy), Maroc Telecom (Morocco) and several operators during this profession.

- Development of Internet Banking applications by Java, JSP and Servlets - Development of credit card applications by Visual Basic on SQL database - Development of loan applications by Java on Oracle database