[Skip to main content](#main-content) [OpenNash Jobs](https://jobs.opennash.com/) [Hiring report](/reports/hiring/) · [All Koç Holding jobs](https://jobs.opennash.com/companies/koc-holding/) · [Search jobs](/search/) Koç Holding · İstanbul/ Türkiye # Information Security Manager İstanbul/ Türkiye Manager or lead Security Listed on Koç Holding’s official careers site. Listed as of October 19, 2026. Check that it is still open and apply there. [Apply on Koç Holding’s careers site →](https://www.kockariyerim.com/jobAd/aygaz-a-S-information-security-manager/e284bed0-977c-4ec0-b402-b59379dd630d) [OpenNash Jobs](https://jobs.opennash.com/) / [Koç Holding](https://jobs.opennash.com/companies/koc-holding/) / Information Security Manager ## Job description ### Key Responsibilities - Lead the management and continuous improvement of the Information Security Management System (ISMS) - Drive compliance programs related to ISO 27001 and other relevant IT governance, risk, and security standards - Assess and enhance compliance with information security policies, procedures, standards, and control requirements across IT teams - Lead IT risk management, governance, and internal control activities to strengthen the organization’s security posture - Oversee the identification, assessment, mitigation, and monitoring of information security and IT-related risks - Manage the vulnerability management program and ensure timely remediation of identified security gaps - Coordinate penetration testing, security assessments, and independent security review activities - Lead internal and external audit engagements and ensure the effective remediation of audit findings - Monitor regulatory, legal, and policy changes and ensure organizational compliance with applicable information security requirements - Oversee the alignment of IT service management (ITSM) processes with security, control, and compliance requirements - Manage third-party and vendor security risk assessment processes - Establish and report key information security, risk, and compliance metrics to senior management on a regular basis - Promote and strengthen a culture of information security awareness across the organization - Ensure that security, risk, and compliance requirements are integrated into IT projects and technology initiatives - Continuously monitor emerging cyber threats, industry trends, and evolving security practices, providing strategic recommendations to management for enhancing the organization's security capabilities. ### Qualifications - Bachelor's degree from a university in a relevant field of study - Minimum 10 years of experience in information security, cybersecurity, IT risk management, governance, compliance, or related disciplines, - Proven experience leading information security or cybersecurity teams, with at least 3 years in a managerial role, - Strong expertise in Information Security Management Systems (ISMS), particularly ISO 27001, with hands-on experience managing internal audits, external audits, and certification processes, - Demonstrated experience in developing, implementing, and continuously enhancing enterprise-wide information security strategies, - Sound knowledge of information security regulations and data privacy requirements, including KVKK, GDPR, and related legislation, - Experience in identifying, assessing, and managing information security risks across complex technology environments, - Proven track record in vulnerability management, penetration testing, security assessments, and security monitoring practices, - Strong understanding of SIEM, EDR/XDR, threat management, and incident response capabilities, - Experience designing and implementing end-to-end security architectures leveraging both defensive and offensive cybersecurity approaches, - Knowledge of secure software development practices (DevSecOps) and the integration of security controls throughout the software development lifecycle, - Familiarity with IT governance, service management, and control frameworks such as COBIT and ITIL, - Relevant professional certifications such as CISM, CISSP, CISA, CRISC, and/or ISO 27001 Lead Implementer/Auditor are preferred, - Strong leadership capabilities with a demonstrated ability to build, develop, and mentor high-performing teams, - Ability to lead initiatives that strengthen information security awareness and foster a security-focused culture across the organization, - Proven ability to collaborate effectively with cross-functional IT teams and business stakeholders, - Excellent communication and stakeholder management skills, with the ability to build strong relationships with senior leadership, audit teams, and external partners, - Strong decision-making, problem-solving, and crisis management capabilities, with a proactive and results-oriented mindset. İlan Sorumlusu Yağmur Bayrak - İşe Alım ve İşveren Markası Sorumlusu İstanbul Aygaz Information Security Manager iş ilanı için başvuru yapmak ve Koç Grubu bünyesinde daha fazla iş ilanını görmek için sitemizi ziyaret edin. Kariyerinize Koç Kariyerim ayrıcalığı ile yön verin. ## At a glance - Posted by the employer: Not stated - First seen by OpenNash: Oct 19, 2026 - Last checked: Oct 19, 2026 - Listed for: Under a day - Location: İstanbul/ Türkiye[Apply on Koç Holding’s careers site →](https://www.kockariyerim.com/jobAd/aygaz-a-S-information-security-manager/e284bed0-977c-4ec0-b402-b59379dd630d) ## More jobs at Koç Holding ### [System Administration and Security Specialist](https://jobs.opennash.com/companies/koc-holding/jobs/fc9764db167c3fc2703a/) İstanbul/ Türkiye ### [Budget and Reporting Specialist](https://jobs.opennash.com/companies/koc-holding/jobs/e393282a5600cb054011/) İstanbul/ Türkiye ### [Corporate Finance Lead](https://jobs.opennash.com/companies/koc-holding/jobs/887262b6c8ebbe0e572d/) İstanbul/ Türkiye ### [Financial Reporting Specialist / Process Lead](https://jobs.opennash.com/companies/koc-holding/jobs/8e5503ba9976c8710995/) İstanbul/ Türkiye ### [Internal Audit Specialist](https://jobs.opennash.com/companies/koc-holding/jobs/87978a63a539562074e3/) İstanbul/ Türkiye ## Similar jobs at other companies ### [Unit Manager - Information Security/Senior Unit Manager - Information Security](https://jobs.opennash.com/companies/bajaj-finserv/jobs/a8fb5612d7e4f215b437/) Bajaj Finserv · Pune Corporate Office - Mantri ### [Information Security Consultant](https://jobs.opennash.com/companies/bouygues/jobs/1c9a2a66eeb7d654d575/) Bouygues · BEEK, Netherlands ### [Information Security Engineer](https://jobs.opennash.com/companies/equinix/jobs/aec544176f0f2a6c9a3a/) Equinix · Warsaw, Poland ### [Manager - Information Security](https://jobs.opennash.com/companies/grasim-industries/jobs/b5eda3a8743d561bd7ea/) Grasim Industries · Maharashtra ### [Information Security Analyst](https://jobs.opennash.com/companies/ntt/jobs/5801f0e12a6a2507adfa/) NTT · Johannesburg, South Africa OpenNash lists jobs from employers’ own careers sites and does not handle applications. Dates come from the employer where stated; “first seen” and “last checked” are our own observations. OpenNash Jobs · Official listings with dates and links to the employer. [Weekly hiring report](/reports/hiring/) · [Methodology](/methodology/)