Freelancer profile translated to English.

Description

Experienced Information Security and Management Systems Specialist with over 35 years of experience in Cybersecurity, IT Governance, Service Management, and Digital Operational Resilience. I advise and audit international companies on the implementation of ISO 27001, ISO 27701, ISO 20000-1, DORA, NIS2, and GDPR, with a focus on integration, efficiency, and audit readiness. My projects combine technical depth with strategic leadership – goal: risk reduction, compliance efficiency, and operational resilience.

Core Competencies

1 DORA Readiness & ICT Risk Management

2 ISO 27001 / 27701 / 20000-1 Lead Auditing

3 NIS2 & GDPR Compliance Frameworks

4 Service Management & ITIL Processes

5 Operational Resilience & BCM/DRP

6 Third-Party Governance (EBA/ESMA/EIOPA)

7 BSI IT Baseline Protection / TISAX Assessments

8 Strategic Security Consulting for C-Level

Certifications

1 CISA (ISACA)

2 ISO 27001:2022 Lead Auditor (CFE / CPD UK)

3 ISO 27701 Lead Auditor

4 ISO 22301 Lead Auditor

5 ISO 20000-1 Lead Auditor

6 ISO 9001 Lead Auditor

7 CISSP (retired)

8 Certified IT Security Manager

Languages

Turkish
Native or bilingual
German
Fluent
English
Fluent

Workplace preferences

Can work on-site

Frankfurt am Main (up to 50km), München (up to 50km), Berlin (up to 50km)

GUCER O.Ü.
Partner
January 2025 - Today (1 year and 7 months)
Leading consulting projects for DORA compliance, ISO management systems, and resilience testing for EU financial and ICT service providers. Results: Reduction of operational risks > 30%, audit readiness before the 2025 deadline. Clients: Volkswagen Group, Audi AG, Borusan Enerji, GIZ GmbH.
ISO 27001 DORA NIS2 NIST BSI IT Baseline Protection
EY GmbH
Senior Cybersecurity Consultant
June 2011 - Today (15 years and 2 months)
Frankfurt am Main, Germany
Focus: Strategic IT and GRC consulting, DORA/NIS2 gap analyses, ISMS implementations, C-level workshops. Responsible for business development, audit planning, and execution of certification audits.
BSI IT Baseline Protection ISO 27001
SGS Türkiye
Principal Auditor
May 2016 - November 2019 (3 years and 6 months)
Istanbul, Türkiye
Conducted over 140 audits against international standards, primarily ISO 27001, ISO 27701, ISO 20000-1, and ISO 22301, and provided training for international clients on topics such as Lead Implementer or Auditor, and Internal Auditor. Focus: Information Security, Risk Management, and Process Optimization.
ISO 27001 ISO 22301 ISO 20000 Risk Management