Arda Cetinkaya
ARDA CETINKAYA
Information Security Manager, CISO
IT Manager/Director

Proven track record of success in Information Security and Infrastructure over a 20-year career in IT, while providing visionary leadership and managing teams for 15 years.

PROFESSIONAL CAPABILITIES

  • Expertise in information and cyber security standards, including NIST, ISO27001, and PCI-DSS, with demonstrated ability to apply these standards to protect organizational assets and mitigate risks.
  • Extensive experience in developing and implementing operational resilience, business continuity, and disaster recovery strategies with a proven track record of designing and implementing effective strategies that minimize downtime and ensure business continuity.
  • Experienced in conducting vendor information security risk assessments and managing risk mitigation strategies.
  • Demonstrated exceptional leadership skills, overseeing and guiding project teams through all phases of mission-critical initiatives, resulting in successful project delivery.
  • Facilitated cross-functional collaboration and communication, resulting in successful implementation of key initiatives and improved team performance.
  • Applied exceptional problem-solving abilities and analytical skills to identify and resolve complex challenges.

PROJECTS & ACHIEVEMENTS

▪ Built Enterprise Information Security Management Strategies and Processes
Successfully built Information Security and Service Management discipline and strategies based on ISO/IEC 27000 series, NIST, ITIL, COBIT framework, and standards, including the development of comprehensive security policies, risk management frameworks, and incident response plans.

▪ Security Management Program - Achievement of Verizon Cybertrust Security Certification
The Verizon Security Management Program (SMP) aligns the business and security needs by measuring IT risk and address information security compliance requirements. It is an enterprise-wide security control assessment and validation program based on ISO/IEC 27001 and 27002. Worked with the global and local teams to meet the program targets.

▪ Secure Hybrid Cloud Implementation
Led the design and implementation of a secure hybrid cloud environment, leveraging the strengths of Microsoft Azure, Amazon Web Services (AWS), and VMware vSphere to deliver scalable, flexible, and cost-effective IT services.

▪ Personal Information Protection Law (KVKK) Legal and Technical Compliance
Led the personal information protection law (KVKK) compliance project. Designed and implemented data protection and data privacy requirements.

▪ HQ Building and Data Center Relocation
Successfully executed a seamless move of an entire building and data center to a new location, ensuring business continuity and zero disruption to operations.
Managed all aspects of IT infrastructure, including electrical and mechanical systems, for both new building and data center construction projects, resulting in timely completion and successful implementation.

▪ Cloud Services Integration (Salesforce.com, Google Apps, Microsoft Office365, Oracle Fusion HCM)
Successfully engaged Google Apps, Salesforce.com, Microsoft Office365 and Oracle Fusion HCM cloud services with SSO to fulfill business needs and managed secure integration with internal systems and applications.

▪ Regional Data Center Project
Worked in Liberty Mutual’s regional data center consolidation project with multinational project teams in USA and Spain. Built service management strategies for services provided to country operations in regional data centers.