Eren ELMAS

• Developing, implementing and monitoring a strategic, comprehensive enterprise information security and IT risk management program • Developing and enhance an information security management framework based on ISO 27001 and TISAX frameworks. • Understanding and interacting with related disciplines through committees to ensure the consistent application of policies and standards across all technology projects, systems and services • Providing leadership to the enterprise's information security organization

•Coaching the Development Team with Scrum Framework. •Describing, analyzing and implementing Business Continuity Planning. •Implementing NIST Standard for Software Development Process. •Supporting and maintaining Synopsys Coverity Code Scanning Tool and guiding software team leader to implement to CI/CD pipeline. •Making awareness training and preparing documentation to developers regarding cyber security in software development life cycle. •Identifying security risks by using application threat modelling.

•Supporting test phases of Global Data Lake Project of Daimler Financial Services and to provide stakeholders with security result information about the quality of the project’s products or service. •Understanding local market's data structure and supporting them as a secure application solution architect. •Leading to Test/Security Team of SDC Turkey as a part of Scrum Team. •Work in alignment with Daimler ITM Roadmap & Strategy, Project Management Methods and IT Security Guideline.

•Identifying architectural and other security risks associated with the solution and implement compensating controls where necessary. •Providing security architecture and advice in support of application development, infrastructure, and enterprise technology projects. Enable, and improve the security of the software solutions developed within the company. •Performing code analysis, application security reviews, and develop an application security training program for developers.

• Overseeing all activities within information security and IT operation team, deciding how to approach tasks, evaluating team progress, providing technical leadership, and facilitating communication between other company teams. • Working closely with web development, Quality, PM teams to refine security checkpoints in the SDLC and make sure information security risks are managed throughout all the phases of the SDLC. • Developing and executing ISO 27001 and SOX Audit program to measure policy compliance.

- Developing B2B and B2C E-commerce web site for Direct Selling Model through Microsoft .Net and MS SQL Technologies. - Maintaining Warehouse Management Application through Microsoft Technologies. - Managing Application's Hardware ( Storage, Blade Server, IIS)