I have more than 25 years of experience in a variety of IT-related activities, including information security, large scale project management, system operation and maintenance services, internal and external IT audit, IT risk management, program & project management, incident and problem management, service management, I&T governance and management, infosec governance, network management. GRC tools, work flow management, vulnerability assessment, penetration testing, wide range of security tools, all flavour of UNIX & LINUX, Windows OS, Oracle, MS SQL, MS Exchange, digital signatures, PKI Infrastructure, DPI, IDS, IDP, AV Protection, Firewall, Router, Threat Detection, Forensic analysis, IT health check... are among in some of technical background. My experience includes a wide spectrum ranging from consultant, tester, project manager, team leader, manager, trainer and senior manager.
Since 2011, active involvement of all ISACA Ank. chapter as President, Vice President, Education Chair and condcuted activities including as CISA, COBIT, CGEIT, CISM, CRISC, COBIT19, DTEF F, Cybersecuity Audit, Cybersecurity F trainer, translation and reviewer of ISACA COBIT19 and other materials, participating as speakers in the events, participating in ISACA HQ certification exams as an Item writer.
Between 2016 - 2019, reporting to CEO and responsible for all IS Governance, Risk management activities including developing and maintaining organization's internal Infosec strategy and tactical plans,developing and maintaining information security policies, standards and procedures, managing and directing information security programs including information security awareness, information security initiatives, directing and supporting information risk managament activities and operations, implementation and maintenance of organization's internal ISO27K, ISO 20K and KVKK (similiar to GDPR) systems, planning and implementation of ISO22K activities, managing the implementation internal IT audit plans etc.
I have been working as veraios IT related positions as IT Operation Manager, IT Director, IS Consultant, IS Risk and Governance Lead etc