Can G

Manager Information Security Risk @ Scalable Capital

About

As an experienced Information Security and Risk Manager with team management experience, I have a proven track record of implementing and maintaining effective security measures to protect organizations from cyber threats. I have a strong understanding of industry standards and regulations and have experience implementing security measures for a wide range of systems and platforms. With excellent problem-solving and communication skills, I am able to lead and manage a team of security professionals to ensure that security is a top priority for the organization. I am passionate about staying up to date with the latest developments in the field and am always looking for ways to improve the security posture of the organizations I work with.ISO 27001 LA / COBIT - PCI DSS - CISM - KVKK - GDPRIT / Cyber Security / Information Security ManagementGRC (Governance, Risk, Compliance) ManagementData Privacy (GDPR / KVKK)DevSecOps / Secure SDLCProject / Team ManagementBudget / Vendor ManagementIT Infrastructure / Security Architecture ManagementIT Risk Management / Risk AssessmentBusiness Continuity and Disaster RecoveryVulnerability / Pentest Management / Hardening BaFin, DORA, NIS2, BAIT, Fintech

Country

Germany

City

Berlin

Industry

Financial Services

Skill

Ağ Oluşturma, İngilizce, Yapay Zeka, DevSecOps, Threat Modeling, Regulatory Compliance, Information Technology, General Data Protection Regulation (GDPR), Security Management, Security Operations, NIST, Risk Management, Incident Management, Auditing, Information Security, Cybersecurity, Data Privacy, Network Security, ISO 27001, ITIL

Experience

Manager Information Security Risk

Scalable Capital

2022-6 - Present · 4 yrs 4 mos

Berlin, Germany

Information System Security Manager

KKB Kredi Kayıt Bürosu

2021-1 - 2022-5 · 1 yr 5 mos

İstanbul, Türkiye

• Had responsibility for IT systems security with a team of four specialists • Managed GRC, ISO 27001 processes and procedures, and IT maturity, ensuring banking regulatory compliance • Reviewed and provided guidance on all projects from a security perspective • Reviewed IT systems security settings and policies, including AD, GPO, firewall, NAC, application whitelisting, EPM, and EDR • Led a security awareness program across the company and among vendors, including conducting vendor risk assessments • Implemented effective vulnerability management and led penetration tests

Head of IT & Security

2018-4 - 2021-1 · 2 yrs 10 mos

Istanbul, Turkey

• Managing IT Infrastructure and Helpdesk Team who is responsible for more than 200 servers (physical and virtual) and 350 clients including disaster recovery site • Managing IT Governance Team • IT Security Management; network and server security, IDS/IPS, NAC, SIEM, DLP, MFA etc. • IT Governance and Internal Audits – Ensuring that all IT follows the group security standards, collect evidences and fulfills regulatory requirements - ISF, COBIT, ISO 27001, KVKK, PCI DSS • Software Development Security Checkup – DevSecOps • IT Budget Management and IT Vendor Management – Contracts, SLA, IT procurement • IT Maturity - Process Improvements related to group standards and frameworks (maturity score from 2.3 to 3.2) • Vulnerability and Patch management, Leading 3rd party pentests

IT Consultant - Owner

YMN Systems Ltd

2017-10 - 2018-4 · 7 mos

London, United Kingdom

Infrastructure and Operations Manager

Scope Markets

2017-6 - 2017-10 · 5 mos

● Decision maker and project manager for infrastructure and operations related projects ● Management of day to day technical operations ● Responsibility for all infrastructure and core applications, such as trade server(MetaTrader4, MetaTrader5), mail server, database server etc.

Head of IT & Security

FX Companies

2011-10 - 2016-11 · 5 yrs 2 mos

• Managing IT and network system deployment, maintenance and security settings for all IT infrastructure, PC systems • Patch and vulnerability management, leading pentests • Firewall, IDS/IPS, DLP, NAC management • Backup, DR, BCP management • Monitoring all systems performance, capacity and availability to serve 5000 online users and 800 personnel at regional offices in 20 countries with a team of 10. • Creating operational and security policies, procedures, standards, guidelines

Presales Consultant

Destek A.Ş.

2010-12 - 2011-10 · 11 mos

Istanbul, Turkey

● Meeting customers with Sales Consultants ● Analysing customer's demands and producing appropriate solutions ● Analysing products and making competitive analysis ● Positioning appropriate products according to specifications ● Project Management

Project Manager

Pukta

2009-6 - 2010-12 · 1 yr 7 mos

Istanbul, Turkey

● Analysing customer demands/requirements and planning projects ● Supporting operation before and after new project implementations ● Planning projects to improve customers network and systems reliability ● Managing 3-person Project Team ● Managing customer relationship

System and Network Administrator

Mplus

2005-10 - 2008-12 · 3 yrs 3 mos

Istanbul, Turkey

● Managing all system and network infrastructure of 750 pcs, 60 servers, 3 firewalls ● Planning projects to improve network and systems reliability to ensure 7/24 operation to serve 900 users. ● Creating and improving IT processes according to ISO 9001 and ISO 27001