Betul Biteker

Delivered a two-year third-party risk management engagement for Yapı Kredi Bank, assessing external service providers and coordinating risk-based remediation. Led collection and review of log records and control evidence for BDDK/BRSA expectations, and conducted ISO 27001 internal audits and gap assessments.

Supported the ISO 27001 program through scope definition, Statement of Applicability, risk register, and risk treatment planning. Performed third-party security assessments across SaaS, AI, media, analytics, and healthcare vendors, and developed privacy, data-retention, and AI acceptable-use policies.

Partnered with Cloud Operations, Product Development, Sales, Legal, and Risk teams on security architecture and technical risk decisions. Participated in SIRT investigations, managed vulnerability risk using Qualys, Rapid7, and Kenna Security, and supported ISO 27001, ISO 22301, and ISO 20000 external audits.

Owned information-security coordination across the company, including supplier security, penetration-test remediation, and ISO 27001-aligned policies. Ensured supplier compliance with Vienna Insurance Group security requirements and acted as central point of contact for security questions.

Supported the design of cloud and network security infrastructure using AWS services including EC2, RDS, ELB, S3, VPC, IAM, and CloudFormation. Assessed access privileges and control structures, and coordinated testing and audit activities.

Supported penetration tests, incident handling, and security monitoring through Kibana dashboards. Contributed to managed security services including McAfee ePO administration.

Managed security controls and regulatory compliance across banking projects, monitoring logs and alerts through Splunk, FortiAnalyzer, and Imperva. Designed COBIT-aligned controls, security policies, and automation scripts, and oversaw penetration tests and patch remediation.

Performed web, mobile, internal, and external network penetration tests using Burp Suite Professional, Nmap, Nessus, AppScan, Acunetix, Kali Linux, and manual validation techniques. Conducted Android reverse engineering and mobile static/dynamic testing.

Provided pre-sales engineering for Cisco, HPE, Juniper, and Aruba networking solutions and Check Point, Palo Alto, McAfee, Symantec, and Trend Micro security products. Analysed customer network topologies and presented technical capabilities during customer meetings.

Supported emission and immunity testing of electronic devices in the electromagnetic compatibility laboratory.

Pursued a Master's program in Health Care Technology at Tallinn University of Technology, Estonia, in 2018.

Earned the Certified Ethical Hacker (CEH) certification from EC-Council in 2015.

Earned a Bachelor of Science in Electronics Engineering from Gebze Institute of Technology, Türkiye, from 2006 to 2011.