Specialist, Risk Management (Information Technology)

As a Specialist in Risk Management (Information Technology) at Paribu, you identify, assess, and monitor operational and information systems risks across business and technology processes. You work alongside Information Security, Technology, Operations, and Internal Control teams to strengthen risk mitigation and support informed decision-making across a crypto asset exchange and custody platform.

What you'll do

• Identify, assess, and monitor operational and information systems risks across business and technology processes
• Maintain risk inventories, control assessments, and key risk indicators to support effective risk monitoring
• Evaluate risks related to access management, change management, cybersecurity, and business continuity processes
• Conduct risk assessments for third-party technology providers and outsourced services
• Monitor operational incidents, security-related events, and loss data while tracking corrective and preventive actions
• Review critical technology changes and provide risk assessments to support informed decision-making
• Collaborate with Information Security, Technology, Operations, and Internal Control teams to identify control gaps and strengthen risk mitigation
• Prepare regular risk reports and communicate key findings, exposures, and recommendations to management
• Support regulatory examinations, internal audits, and compliance activities related to information systems and operational risk

What you bring

• A bachelor's degree in Computer Engineering, Software Engineering, Industrial Engineering, Management Information Systems, or a related field
• 3-5 years of experience in operational risk, IT risk management, information systems auditing, IT risk consulting, or information security
• A strong understanding of operational risk methodologies, including RCSA, incident and loss data management, and KRI development
• Experience assessing third-party technology providers and outsourced service risks
• Knowledge of IT processes, including change management, identity and access management (IAM/PAM), backup, and disaster recovery
• An understanding of cloud infrastructure, network security fundamentals, and cybersecurity incident management
• Familiarity with IT governance and security frameworks such as COBIT, ISO 27001, ISO 22301, or NIST CSF
• The ability to interpret system logs, monitoring data, and basic SQL queries for risk analysis
• Strong analytical thinking, critical judgment, and the ability to identify control weaknesses through evidence-based assessments
• Clear communication skills with the ability to explain technical risks and their business impact to non-technical stakeholders
• Strong ownership, attention to detail, and the ability to collaborate effectively with technology and business teams

Nice to have

• Familiarity with SPK information systems regulations and regulatory requirements
• Certifications such as CISA, CRISC, ISO 27001, or ISO 22301

What we offer

• Meal allowance through a flexible meal card
• Comprehensive private health insurance for employees, including spouse and children
• Financial support for commuting based on your office route
• S.O.S. leave of up to 10 days per year for urgent and unexpected matters, apart from annual leave
• One extra day off during your birthday month
• Language learning support to enhance English communication skills
• A personal development budget for exploring hobbies, attending professional courses, and personal growth
• Access to a digital health and wellness platform, including mental health support and well-being resources
• A relocation allowance if you are currently based outside Istanbul and relocating within a 15-km radius of Paribu's office
• Top-tier work equipment and all essential tools you need
• Cultural events including concerts, theater, cinema, and sports tickets through company-sponsored raffles

About Paribu

Founded in 2017, Paribu has been instrumental in developing Türkiye's crypto asset ecosystem, offering a fast, easy, and secure exchange experience with more than 210 crypto assets. In 2024, the company launched Paribu Custody, one of the few globally digital asset custody solutions tailored for institutional clients, and Paribu Self, a next-generation crypto wallet for individuals and startups.