Senior Information Security Specialist

About Paribu

Founded in 2017, Paribu has been playing a key role in the development of Türkiye’s crypto asset ecosystem by delivering innovative blockchain-based products and services. It offers a fast, easy, and secure exchange experience with more than 210 crypto assets.

In 2024, Paribu introduced Paribu Custody, one of the few globally digital asset custody solutions tailored for institutional clients. At the same time, Paribu offers a secure self-custody experience for individuals and startups through its next-generation crypto wallet solution, Paribu Self. Beyond its mission to increase blockchain adoption, Paribu is committed to shaping the future by actively supporting culture, arts, sports, and education.

Why join Paribu?

Paribu works with curious, innovative, and impact-driven professionals who are passionate about pushing boundaries and driving technological advancement. It fosters a culture of continuous learning, collaboration, and sharing. Whether you specialise in technology, design, strategy, operations, or beyond, you will be part of a team shaping the future of finance.

Paribu provides a working environment where ideas turn into reality, and innovation thrives. Here, you'll work alongside talented professionals, tackle exciting challenges, and contribute to meaningful projects that align with Paribu’s vision of delivering fast, easy, and secure experiences.

The impact you’ll make

At Paribu, every team member plays a crucial role in driving innovation and delivering high-quality solutions As a Senior Information Security Specialist, you will be responsible for:

• Providing independent, risk-based assurance over the organization's information security controls, governance processes, and compliance posture
• Leading technical and process-level security audits across infrastructure, applications, cloud environments, and third-party services
• Evaluating whether security controls are appropriately designed, implemented, and operating effectively
• Identifying control gaps and security risks, providing practical, risk-based recommendations to strengthen the control environment
• Validating remediation efforts and verifying the effectiveness of corrective actions
• Supporting regulatory, certification, and internal audit requirements by ensuring compliance with applicable security standards and frameworks
• Delivering clear, evidence-based audit reports that enable leadership to make informed risk decisions
• Contributing to the continuous improvement of the organization's security governance, audit methodology, and overall control maturity

Key competencies

We value skills and potential as much as experience. To thrive in this role requires:

• Strong knowledge of information security frameworks, including ISO 27001, NIST CSF, NIST 800-53, CIS Controls, PCI DSS, and SOC 2
• Experience conducting information security audits and evaluating technical and operational controls
• Solid understanding of IT General Controls (ITGC), including access management, change management, and IT operations
• Knowledge of cloud security auditing across AWS, Azure, and GCP environments
• Understanding of application security principles, including authentication, authorization, and secure development practices
• Familiarity with network and infrastructure security concepts such as firewalls, segmentation, logging, and monitoring
• Experience with risk assessment methodologies, control testing, audit sampling, and evidence evaluation
• Working knowledge of security technologies including SIEM, IAM, EDR, DLP, and vulnerability management solutions
• Understanding of regulatory and compliance requirements, including GDPR and other applicable security regulations
• Excellent analytical thinking and structured problem-solving skills
• Strong written and verbal communication skills with the ability to present technical findings to diverse stakeholders
• Professional skepticism with the confidence to challenge assumptions while maintaining objectivity and independence
• High attention to detail and disciplined documentation practices
• Ability to manage multiple audits and competing priorities effectively
• Strong collaboration and stakeholder management skills across security, technology, compliance, and business teams
• Adaptability to evolving technologies, regulatory requirements, and emerging cyber threats
• Demonstrates integrity, confidentiality, and sound ethical judgment in all audit activities

The advantages of being at Paribu

Paribu invests in its team’s growth, well-being, and happiness. Here’s what you can expect:

• Meal allowance – Generous support with a flexible meal card.
• Private health insurance – Comprehensive coverage for employees, including spouse and children.
• Commuting support – Financial support for commuting based on your office route.
• S.O.S. leave (10 days) – Additional leave days up to 10 days per year for urgent and unexpected matters, apart from annual leave.
• Birthday leave – One extra day off during your birthday month.
• Language learning support – Resources to enhance English communication skills.
• Personal development support – Budget for exploring hobbies, attending professional courses, and personal growth.
• Well-being & health platform – Access to digital health and wellness services, including mental health support, and well-being resources.
• Relocation allowance – Financial support for relocation within a 15-km radius of the Paribu’s office.
• Top-tier work equipment – High-performance devices and all the essential tools you need to do your best work.
• Cultural events – Enjoy concerts, theater, cinema, and sports tickets through company-sponsored raffles.

The hiring journey

From application to onboarding, here's a step-by-step look at your journey with Paribu.

1. Application: Submit your application online.

2. Initial screening: People Team reviews your resume.

3. Interview process: Meet with hiring managers and team members.

4. Assessment tests / Case study: Complete a case study or technical test to help us better understand your problem-solving and technical skills.

5. Offer & onboarding: If it’s a great fit, you will be welcomed on board.

Application process

Should you have already applied, here are two essential facts about the process:

• While we carefully review every application, only candidates whose profiles best align with the role will be contacted. We appreciate your understanding on this matter.
• All applications received by Paribu are treated equally, without prejudice to age, gender, religion, race, disability, or marital status, in full compliance with personal data protection principles.

In accordance with applicable data protection regulations, please note the following:

You have been informed that my personal data is processed by Paribu Teknoloji A.Ş. (“Paribu” or “Company”) through the “Paribu Teknoloji A.Ş. Clarification Text on the Protection of Personal Data for Employee Candidates” prepared as part of the job application process of employee candidates and in accordance with the Personal Data Protection Law No. 6698.