Risk, Compliance & Information Security Executive
At team.blue · Atasehir-Istanbul; Ataşehir, Türkiye
- Security
Where you’ll work
Hybrid, based in Istanbul
“Atasehir-Istanbul”
From the location.
“Ataşehir, Türkiye”
From the job board field.
The job board lists it as hybrid.
Hybrid means some days in the office. The listing says how many, and where.
Report a mistake
- Posted
- 22 July 2026
- First seen by us
- 15 October 2026
- Last checked
- 16 hours ago
Job description
From team.blue’s job post, as they wrote it.
Shape Your Future at Ticimax! 🚀
Position: Risk, Compliance & Application Security Executive
Location: Kozyatağı Allianz Tower (Hybrid)
Job Summary
We are looking for a Risk, Compliance & Application Security Executive to ensure our software products are secure and compliant with relevant regulations. This role will manage penetration testing, vulnerability assessment, and oversee certification processes such as PCI DSS and ISO 27001.
Read the full description
Responsibilities:
* Manage PCI DSS (Service Provider Level 1) and ISO 27001 compliance and certification processes
* Analyze security vulnerabilities and propose effective technical and organizational controls
* Plan and coordinate internal and external penetration tests, and follow up on remediation
* Perform regular vulnerability assessments using tools such as Nessus, Qualys, etc.
* Conduct risk assessments and prepare corrective action plans
* Use SIEM and GRC tools for monitoring and reporting
* Prepare for audits and manage relevant documentation
* Raise awareness across the organization on compliance and security best practices
Required Skills:
* Solid understanding of PCI DSS and ISO 27001 frameworks
* Hands-on experience with vulnerability scanning tools (e.g. Nessus, Qualys) and SIEM platforms
* Familiarity with GRC systems and compliance reporting
* Strong documentation, audit preparation, and analytical skills
* Proficiency in English (written and verbal)
Nice to Have:
* Experience in secure software development practices
* Familiarity with remediation follow-ups after penetration tests
* Relevant certifications (e.g. OSCP, CEH, ISO 27001 Lead Auditor, CISA)
Does This Interest You?
If you’re ready to make an impact in the e-commerce landscape, we want to hear from you!🌟
Get jobs like this by email
Once a week, we email the new remote jobs open where you live, each with the line that proves it. Every email has a one-click unsubscribe.