Ozan Olali

Leading the MEA region for X-Force Red (Offensive Security) Services including technical projects in following domains: - Red Teaming & Adversary Simulation - Application Security Testing & Threat Modelling & Code Review - Vulnerability & Exposure Management Services - Offensive Security Consultancy Services (Process design, Tooling, Integrations, Enablement) - IT/OT Penetration Testing - Specialty Penetration Testing (IoT Devices, Cloud Environment, Blockchain) - Industry Penetration Testing (Automotive, Aviation, Industrial Control Systems, ATM/ Kiosk)

Leading the MEA region for Data and Application Security Services including technical projects in following domains: - Application Security & Threat Assessment - DevSecOps Transformation Consultancy & Technical Integration - Application Security Governance - Data Security & Protection Program Implementation

Responsible for consulting about IBM Security Services solutions that are detailed below. Security Intelligence & Operations Consulting: •Developing more maturity in intelligence-driven security operations across all environments. Assessing security posture and maturity against best practices in security. Building, designing or improving security operations center (SOC). CyberSecurity Assessment And Response: •Delivering cybersecurity assessments, penetration testing, planning and response services, with proven expertise from mainframe to mobile. Security Strategy, Risk and Compliance: •Evaluating existing security practices—including payment card industry (PCI) security, identity and IT regulatory compliance needs and gaps— against business requirements and objectives. Delivering a wide range of capabilities—from security program development, to regulatory and standards compliance, to security education and training. Identity & Access Management Services: •Evaluating and designing every aspect of identity and access management across enterprises, including user provisioning, certification, Identity Governance technologies, web access management, enterprise single sign-on, multi-factor authentication, and user activity compliance. Data & Application Security Services: •Incorporating a risk-balanced strategy along with data protection technology to more cost effectively help safeguard organizations' critical information and sensitive data for enterprise applications.

•Responsible for performing and managing yearly Digital Channels application audits and security assessments. (Internet Banking, Mobile Banking, ATM Systems) •Conducting Penetration Tests (Social Engineering Testing, Mobile Application Security, Web Application Security, Database Systems, DDOS Testing, Domains and End-User Computers, Network Topology and Active Devices, Wireless Network Systems, VOIP Security) •Assessing new banking processes and products according to banking regulations and information security best practices, giving recommendations to comply with related regulations. •Conducting applications and information technology general control audits under BDDK regulations and COBIT methodology. •Conducting IT Audit for subsidiaries of Garanti Bank (Garanti Factoring, Garanti Mortgage, Garanti Bank Romania etc.)

•Conducting applications and information technology general control audits under BDDK regulations and COBIT methodology. •Assessing new banking processes and products according to banking regulations and information security best practices, giving recommendations to comply with related regulations.