Specialist, Risk Management (Information Technology)

About Paribu

Founded in 2017, Paribu has been playing a key role in the development of Türkiye’s crypto asset ecosystem by delivering innovative blockchain-based products and services. It offers a fast, easy, and secure exchange experience with more than 210 crypto assets.

In 2024, Paribu introduced Paribu Custody, one of the few globally digital asset custody solutions tailored for institutional clients. At the same time, Paribu offers a secure self-custody experience for individuals and startups through its next-generation crypto wallet solution, Paribu Self. Beyond its mission to increase blockchain adoption, Paribu is committed to shaping the future by actively supporting culture, arts, sports, and education.

Why join Paribu?

Paribu works with curious, innovative, and impact-driven professionals who are passionate about pushing boundaries and driving technological advancement. It fosters a culture of continuous learning, collaboration, and sharing. Whether you specialise in technology, design, strategy, operations, or beyond, you will be part of a team shaping the future of finance.

Paribu provides a working environment where ideas turn into reality, and innovation thrives. Here, you'll work alongside talented professionals, tackle exciting challenges, and contribute to meaningful projects that align with Paribu’s vision of delivering fast, easy, and secure experiences.

The impact you'll make

At Paribu, every team member plays a crucial role in driving innovation and maintaining a secure and reliable financial ecosystem. As a Risk Management Specialist – Information Technology, you will be responsible for:

• Identifying, assessing, and monitoring operational and information systems risks across business and technology processes
• Maintaining risk inventories, control assessments, and key risk indicators to support effective risk monitoring
• Evaluating risks related to access management, change management, cybersecurity, and business continuity processes
• Conducting risk assessments for third-party technology providers and outsourced services
• Monitoring operational incidents, security-related events, and loss data while tracking corrective and preventive actions
• Reviewing critical technology changes and providing risk assessments to support informed decision-making
• Collaborating with Information Security, Technology, Operations, and Internal Control teams to identify control gaps and strengthen risk mitigation
• Preparing regular risk reports and communicating key findings, exposures, and recommendations to management
• Supporting regulatory examinations, internal audits, and compliance activities related to information systems and operational risk

Key competencies

We value skills and potential as much as experience. To thrive in this role requires:

• Bachelor's degree in Computer Engineering, Software Engineering, Industrial Engineering, Management Information Systems, or a related field
• 3–5 years of experience in operational risk, IT risk management, information systems auditing, IT risk consulting, or information security
• Strong understanding of operational risk methodologies, including RCSA, incident and loss data management, and KRI development
• Experience assessing third-party technology providers and outsourced service risks
• Knowledge of IT processes, including change management, identity and access management ( IAM/PAM), backup, and disaster recovery
• Understanding of cloud infrastructure, network security fundamentals, and cybersecurity incident management
• Familiarity with IT governance and security frameworks such as COBIT, ISO 27001, ISO 22301, or NIST CSF
• Ability to interpret system logs, monitoring data, and basic SQL queries for risk analysis
• Strong analytical thinking, critical judgment, and ability to identify control weaknesses through evidence-based assessments
• Clear communication skills with the ability to explain technical risks and their business impact to non-technical stakeholders
• Strong ownership, attention to detail, and ability to collaborate effectively with technology and business teams
• Familiarity with SPK information systems regulations and regulatory requirements is considered a plus
• Certifications such as CISA, CRISC, ISO 27001, or ISO 22301 are considered a plus

The advantages of being at Paribu

Paribu invests in its team’s growth, well-being, and happiness. Here’s what you can expect:

• Meal allowance – Generous support with a flexible meal card.
• Private health insurance – Comprehensive coverage for employees, including spouse and children.
• Commuting support – Financial support for commuting based on your office route.
• S.O.S. leave (10 days) – Additional leave days up to 10 days per year for urgent and unexpected matters, apart from annual leave.
• Birthday leave – One extra day off during your birthday month.
• Language learning support – Resources to enhance English communication skills.
• Personal development support – Budget for exploring hobbies, attending professional courses, and personal growth.
• Well-being & health platform – Access to digital health and wellness services, including mental health support, and well-being resources.
• Relocation allowance – Financial support for relocating to within a 15-km radius of Paribu's office, if you are currently based outside Istanbul.
• Top-tier work equipment – High-performance devices and all the essential tools you need to do your best work.
• Cultural events – Enjoy concerts, theater, cinema, and sports tickets through company-sponsored raffles.

The hiring journey

From application to onboarding, here's a step-by-step look at your journey with Paribu.

1. Application: Submit your application online.

2. Initial screening: People Team reviews your resume.

3. Interview process: Meet with hiring managers and team members.

4. Assessment tests / Case study: Complete a case study or technical test to help us better understand your problem-solving and technical skills.

5. Offer & onboarding: If it’s a great fit, you will be welcomed on board.

Application process

Should you have already applied, here are two essential facts about the process:

• While we carefully review every application, only candidates whose profiles best align with the role will be contacted. We appreciate your understanding on this matter.
• All applications received by Paribu are treated equally, without prejudice to age, gender, religion, race, disability, or marital status, in full compliance with personal data protection principles.

In accordance with applicable data protection regulations, please note the following:

You have been informed that my personal data is processed by Paribu Teknoloji A.Ş. (“Paribu” or “Company”) through the “Paribu Teknoloji A.Ş. Clarification Text on the Protection of Personal Data for Employee Candidates” prepared as part of the job application process of employee candidates and in accordance with the Personal Data Protection Law No. 6698.