Looking for a job

Ayşegül demirlioğlu

@ayegldemirliolu

Message

I strengthen technology risk, resilience, and control effectiveness across regulated, multi-site organizations.

Turkey

Message

What I'm looking for

I'm looking for a role where I can strengthen technology risk, operational resilience, and control effectiveness through practical testing, clear governance, and remediation ownership across business and technology teams.

I've led technology risk, operational resilience, and control testing across Marsh, Lactalis Group, Aydem Energy, AvivaSA, Garanti BBVA, Turkcell, and Denizbank. At Marsh, I deliver business continuity, crisis management, and cyber-resilience engagements for 40+ clients, turning assessments and simulations into prioritized actions.

I build audit-ready ISMS and resilience programs using ISO 27001, NIST, COSO, DORA, KRIs, and evidence-based control testing. I've led ISO 27001 certification across multi-site operations, improved security awareness from 20% to 85%, and reduced incident-reporting cycles from one week to two days.

Experience

Work history, roles, and key accomplishments

Current

Business Resilience Senior Manager

Current

Marsh

Aug 2023 - Present (3 years 1 month)

Shaped and delivered Business Continuity, Crisis Management, and cyber resilience engagements for 40+ clients across multiple industries. Led BCM activities, drove transparency through executive reporting, and delivered trainings to 10 clients, improving awareness from 40% to 90%.

Business Continuity Crisis Management Cyber Resilience Bias Risk Assessment Stakeholder Management Training Reporting

IT Risk and Compliance Executive

Lactalis Group

Apr 2021 - Jul 2023 (2 years 3 months)

Owned and improved the ISMS (ISO/IEC 27001), led first-time certification across a multi-site footprint, and managed security and compliance alignment. Coordinated vulnerability assessments, investigated incidents, and delivered security awareness trainings, increasing awareness from 20% to 85%.

ISO 27001 NIST CSF KVKK ISMS Vulnerability Assessment Penetration Testing Incident Response Root Cause Analysis Security Awareness KRIs Business Continuity Disaster Recovery

Risk Management Executive

Aydem Energy

Mar 2020 - Apr 2021 (1 year 1 month)

Served as trusted advisor to the Holding and 10 group companies on ERM, IT risk governance, and business continuity. Led RCSA workshops, developed KRIs, and coordinated incident response and Operational Risk Committee governance.

ERM RCSA KRIs Incident Management Risk Reporting Business Continuity Governance

Senior Risk Assessment Responsible

AvivaSA

Jan 2017 - Feb 2020 (3 years 1 month)

Led operational risk assessment activities across ~15 business and support units, performed risk and control assessments, and executed the annual compliance monitoring plan. Designed and delivered enterprise-wide trainings, improving completion rate to 90%.

Operational Risk Risk Assessment Compliance Monitoring Training KVKK Business Continuity Incident Reporting

Assistant Risk Manager

Garanti BBVA

Jun 2015 - Jan 2017 (1 year 7 months)

Supported enterprise-wide operational risk governance for a large financial services group. Redesigned incident reporting process, assessed incident probability/impact, and delivered trainings to improve reporting quality.

Operational Risk Incident Reporting Risk Assessment Governance Training BDDK BBVA

Senior Internal Auditor

Turkcell

Mar 2011 - Jun 2015 (4 years 3 months)

Assessed control environment and led SOX 404 process audits for 8 core processes annually. Delivered ~4 internal audit engagements per year, covering financial, operational, and IT audits.

SOX 404 Internal Audit Risk Assessment Control Testing Audit Reporting Stakeholder Management

Internal Control Specialist

Denizbank

Apr 2008 - Mar 2011 (2 years 11 months)

Performed operational control testing across credit and card processes, identified 25 improvement areas, and standardized risk tracking. Automated key control checks using ACL, streamlining testing for 4 processes.

Internal Controls Control Testing Risk Assessment ACLs UAT Credit Processing Card Payment