Ozan V.

-E2e management and facilitation of security activities in top tier technology programs. - Understand business requirements and provide security solution assessment and design detailed solutions together with reliable estimations - Security consultancy for AI( computer vision, LLM, Deep Learning) related projects. Analysis of security requirements, spec/standard reviews, dataset security review, metric and cross validation assessment for cyber-security purposes. - Security lead for Crypto Wallet and Transaction program. - Identify and suggest improvements to existing security systems - Train staff to recognize security threats and adhere to the organization’s security best practices -Provide complex technical advice, recommendations and consultancy on networks, infrastructure, products and services supplied - Lead threat modelling in critical projects covering but not limited to secure application design, attack trees, VAST based flows. Identifying possible security threats and determining the best security measures. Management of identified risks in project life cycle. - Review of in-scope project security requirements and evidence provided by the project manager or scrum master to support closure of Secure Project Lifecycle processes where the business units require support - Providing Information Security consultancy including advice for; projects, solution design, small changes, audit/assurance and application of security policy, standards, regulation, and good practice.

• Ensure security compliance requirements, laws and regulations (BDDK, PCI DSS, PCI PIN, Swift, KVKK, CIS) in SDLC and IDLC Projects, • Assessment of IT projects with regards to Security Architecture and Secure-SDLC, • Evaluate security requirements and risks, to determine preventive and detective security measures to be taken within the scope of the project, • Perform threat assessment (TA) practice to identify project-level security risks, • Perform proactive security guidance into the software and infrastructure design process, • Facilitation of informed security leads decision making through comprehensive risk management in a timely manner before production, • Documentation of important security decisions made during development, ensuring management that security was fully considered during all phases, • Define major activities and milestones, • Initiate Security Activity Planning and key security milestones including time frames, • Ensuring all key leads have a common understanding, including security implications, considerations, and requirements, • Develop Security part for project documents, • Ensuring supply chain and software security assurance. • Performing and leading threat modellig process for complex projects. • Leading agile threat modeling implementation as a part of Secure-SDLC processes. • Performing threat assessment for live apps owned by subsidiary companies

Lecturer for Network Security and Cryptography Department of Computer Engineering

• Management and leadership activities for the new Information Security Officer Structure Program • Preperation and facilitation of new Information Security Officer Handbook. Roles in defining governance, roles&responsibilities of security officers in Sony. • Compiling and Review of multiple security standarts as a part of new ISO program. • Contributor in the Incident Response Optimization Program within Sony Electronics. • R&D and Engineering Groups Security Maturity Program Manager • Participator for building the R&D Groups Security Framework • Responsible for security assessments of R&D Groups and coordination of follow-up actions. • Responsible for performing security assessments in different R&D environments of Sony which are distributed across the world • Management of penatration tests and SDLC implemtation projects for affiliate companies • Reporting to Senior Management on program status • Overall Management of Application Security Assessments

• End to end project manager for the commercial and service projects in 4.5G Program(Top Priority Program for Vodafone Turkey in 2015) • Management and coordination responsibility in all phases of the projects from concept until operational handover • Management of multi-vendor included projects carrying out the responsibility for BID, purchase and delivery phases. • Meeting contractual, time and scope requirements • Management of multi-domain impacting projects with a CAPEX of 1 million USD or above. • Working with technical and business analysis teams to create process flows for incoming vendors or existing environment integrations • Accountable for providing regular updates to upper management including regular presentations to CXO level • Continous risk monitoring for ongoing projects, managing risks , developing contingency plans and executing escalation where neccessary • Identification of stakeholder communication requirements , development of a • Communication plan and execution of plan for internal and external stakeholders • Management of multi-domain software projects in waterfall and agile approaches. • Responsible for PMO quality audits • Internal auditor for ISO 27001 compliance • Management of Mobile Wallet project that covers mobile-cash management of VF and compliance with GDPR and PCI standarts • Web/Mobile application security tests coordination and follow ups

• Achieving financial targets and managing cash, debts, and assets effectively, accountable for project profit or loss. • Responsible for leading and assisting transition and transformation projects. Developing full scale project plans, define project tasks and resource requirements. Management of project budget and timelines. Identifying stakeholder communication requirements, developing an internal and external communication strategy, executing communication • Managing the risk and opportunity process for each project starting from identification to risk monitoring. • Assistance in bid management for new coming projects. • Contract Management; contract preparation, negotiating and managing legal agreements with customers, partners and suppliers. • Monitor and report on service delivery metrics and overall performance of ongoing IT operations • Maintain relationships with technical teams, IT, and business partners. Communicate on major service outages/escalations. • Working with the client and operations teams to identify and manage service improvement activities • 3rd party management responsibilities • Managing customer satisfaction in all services delivered to different customers. • Participate and perform internal ISO 27001 audits in Turkey and other Atos countries • Data center assessments and security evaluations for customers

• Gateways solution architecht on different NGN migration projects • Acted as consultant on different telecommunication integration projects with regards to infrastructure capacity, our vendors gateways and their capabilities and network planning. • Solution and support team leader for gateways(technical project management and solution analysis role on signal and media gateways) • Perform internal IT audits for different departments for ISO 27001 and compliance with ITIL framework • Mentored new hired engineers and prepared training road-maps for them • Participated in client or design meetings as a Subject matter expert • Cooparated with sales department to pull of deals as Technical expert • Netas Innovation Team Member and project consultant • Provide product support and solution guidance for world-wide customers like Verizon, Rogers, Telstra, Motorola, MIRS(Israel), Softbank • Feature sustaining design engineering for signaling/media gateways

• CCNA, MCSE, MCITP, Network+ Trainer • Pre-sales and sales of Microsoft official trainings for individual and enterprise customers • Network administration for the company intranet • IT Consultant for small and medium scale infrastructures • Conducting seminars about new Microsoft technologies • Managing the Exchange email server and ensuring the appropriate level of security for company network • Network design and improvement for small to medium scale enterprise clients

• IT administration for the local office • Conducting IT seminars and presentations in the office for knowledge distribution • Maintain the sanity of IT infrastructure within the office. • Lead IT student exchange programs between Turkey and other countries

Enrolled with full scholarship. Focusing on artificial intelligence and cyber security in my doctoral studies. Passed the qualification exam and currently focused on thesis.

A course given by Prof. Robert Shiller focusing on financial markets, portfolio management and behavioral finance. Transcript: https://www.coursera.org/records/6HFcr2UvdMNfHBqV

Marketing, Human Resources and Project Management Studies.