Levent Mukan

ISO 27001 & 22301 internal audits and implementation IT governance and IT auditing, third party IT audits for clients (COBIT, ISO 27001, NIST CSF, ITIL/ISO 20000) Risk consulting (risk control matrix preparation, connection with controls, risk assessments) Offering preparation and contract drafting Data privacy related projects, such as compliance, auditing, and training Training and awareness programs, internal trainings

Only information security resource of the bank based in Istanbul Implementation of the information security program Rebuilding the IT governance structure of the bank Internal and external audit findings (attending meetings, closing findings, reporting) (briefly) served as secretary to the IT steerco, which included information security steerco in itself Vulnerability assessment reports (based on CIS) and pentests

Provided consulting services to clients; - Privacy compliance (local legislation and GDPR) - Training and awareness programs - DLP implementation - ISO 27001 internal audits Appointed cyber security SME for the risk committee of Sabancı Holding (parent company) Providing consultation (legal and technical) to senior management on contracts with clients and candidate clients

Privacy compliance projects (implementation, audits, governance, risk assessments) for 50+ clients. Clients included top 5 banks, 2 of the 3 telco companies, pharma, aviation, financial services, and retail. Internal and external trainings DPIA for a multinational HR consultant Risk consulting for a multinational architectural consultant for a smart city project Risk consulting (risk register review) for the legal department of a multinational bank ISO 27001 implementation

Master's degree focused on IT governance, information security and cyber security, cloud computing, blockchain and ICT