iyzico - Information Security Specialist

Istanbul, Turkey /
iyzico-Engineering /
About PayU 
PayU, a leading payment and Fintech company in 50+ high-growth markets throughout Asia, Central and Eastern Europe, Latin America, the Middle East and Africa, part of Prosus group, one of the largest technology investors in the world is redefining the way people buy and sell online for our 300.000+ merchants and millions of consumers. 

As a leading online payment service provider, we deploy more than 400 payment methods and PCI-certified platforms to process approximately 6 million payments every single day. 

iyzico was founded in 2013 to provide online payment services and artificial intelligence-based payment technologies to businesses of various sizes in the world of e-commerce. By making the complex payment processes simple through its easy and secure platform, iyzico had achieved significant successes through supporting thousands of businesses in digitalisation and was acquired by the global payment systems giant PayU in 2019. With such robust structure, iyzico is operating on the principle of democratising financial services and making them accessible for everyone alongside the services it provides to businesses.
Through iyzico Buyer Protection, consumers’ concerns regarding shopping online are resolved and better experiences are enabled. Control is handed back to the consumers by 24/7 live support through the iyzico mobile app and convenience in cancellation/returns processes. To this date, more than 2 million consumers shopped online under the security provided by iyzico Buyer Protection and this number is increasing daily. Via pay with iyzico, which is a blended payment solution, millions of consumers who do not use banking can safely shop online under the belt of iyzico Buyer Protection.
iyzico continues to simplify online shopping for both consumers and sellers by the simple, accessible, and innovative technologies it developed.

Key Responsibilities
·       Work closely with teams across the organization (particularly Infra, Software, Compliance, and Legal) to implement proactive security measures.
·       Developing and implementing a comprehensive plan to secure iyzico network.
·       Documenting any security breaches and assessing their damage.
·       Conduct routine phishing and Information Security campaigns to increase users’ awareness of social engineering attacks and provide periodic reporting to Information Security Manager.
·       Monitoring iyzico assets for security breaches, vulnerabilities, and attacks with using related security solutions.
·       Working with the Information Security Manager to roll out new or updated policies and procedures
·       Assist in activities towards fulfilling various compliance regulations such as PCI DSS, EU GDPR, SOX etc.
·       Assessing, planning, and coordinating patch management activities for internal and third-party hosted systems
·       Providing and collecting evidence which points to information security for local, global and 3rd party audits
Qualifications & Experience
·       Bachelor’s degree in Engineering / Information Systems / Information Security / Cyber Security
·       Min. 3-4 years of relevant experience in a similar role
·       Strong understanding of Information Security solutions, this will cover areas such as firewalls, AV, Host and Network Intrusion Detection/ Prevention Systems; web proxies, SIEM, IAM, DLP; Mail Protection and Network Fundamentals
·       Knowledge and experience on creation security controls (Use Cases, detection rules)
·       Knowledge of coding/programming and use of at least one coding language is an asset.
·       Knowledge of information security standards and legislation.
·       SOC experience is preferred.
·       Experience in the information security of the financial industry is a big plus
·       Security certification (CEH, Comptia Sec+ etc.) is a plus
·       Keen interest in pursuing an Information Security specialism
·       Good knowledge of various information security frameworks.
·       Excellent problem-solving and analytical skills.
·       Good communication skills (both internally and with customers/prospects)
·       Strong feedback and continuous learning mindset

What We Offer
·       A culture of continuous development: conferences, in-house events & Tech Talks to stay up-to-date on current research and technology. P.S.:You do not need to wait to get on the stage and share your expertise with you teammates and the community,
·       Online Training Platform (Free access to Udemy, Harvard ManageMentor, Getabstract, etc.)
·       Freedom under responsibility is our common mindset. That’s how we designed our flexible working model called iyzico Homequarters
·       Freedom to work from homes or from the offices located both side of İstanbul. Our headquater is in Maslak and satellite office is in Ataşehir. Both offices are in the area allocated to us in Kolektif House
·       Free access to all Kolektif House
·       iyzicoMate is assigned to help you with anything you may need
·       A detailed orientation program designed for you to fully grasp the iyzico culture.
·       Meal & Internet Allowance
·       A gift voucher to create an ergonomic workspace at home and we are providing extra monitor and office chair
·       Macbook
·       A gift voucher to meet tech needs at home
·       Employee support program: free psychological counseling, legal advice, financial advice etc.
·       Private health insurance
·       1 day birthday leave
About us:  
At PayU, we are a global fintech investor and our vision is to build a world without financial borders where everyone can prosper. We give people in high-growth markets the financial services and products they need to thrive. Our expertise in 18 high-growth markets enables us to extend the reach of financial services. This drives everything we do, from investing in technology entrepreneurs, to offering credit to underserved individuals, to helping merchants buy, sell and operate online. Being part of Prosus, one of the largest technology investors in the world, gives us the presence and expertise to make a real impact. Find out more www.payu.com 

Our Commitment To Building A Diverse And Inclusive Workforce 
As a global and multi-cultural organization with varied ethnicities thriving across locations, we realize that our responsibility towards fulfilling the D&I commitment is huge. Therefore, we continuously strive to create a diverse, inclusive and safe environment, for all of our people, communities and customers. Our leaders are committed to create an inclusive work culture which enables transparency, flexibility and unbiased attention to each and every PayUneer so they can succeed, irrespective of gender, color or personal faith. An environment where every person feels they belong, that they are listened to, and where they are empowered to speak up. At PayU we have zero tolerance towards any form of prejudice whether a specific race, ethnicity, or of persons with disabilities or the LGBTQ communities.