Ates Sunbul IT Audit, Security and Consultancy Partner
Key Qualifications:
- Led FATCA impact assessment project of the Bank and Know Your Customer processes (KYC)
-
Led a full regulatory review in Bank to evaluate the adequacy and effectiveness of the control environment,
This involved leading a team of Product Control, Front Office, Risk, Compliance and IT resource. The team were exposed to sensitive and frequent regulatory interventions during this period. - The SAP implementation Project consists of technical design and implementation of SAP R/3 systems (including FI, SD, Retail). Project phases included defining company processes and integrating cashier systems to SAP.
- Participated in developing an IT Audit risk assessment model, encompassing all production systems, technology infrastructures, planned enhancements, new systems development, corporate IT initiatives and IT compliance activities.
- Extensive knowledge and auditing experience on Core banking, Credit Cards, Internet Banking, Data management, Business Intelligence, Third Party Management, Regulatory Compliance and Identity Management environments and applications
- Led the Business Continuity Management process design and implementation project. The project included the documentation of Threat & Risk Assessment, Business Impact Analysis, IT Disaster Recovery Plans and Function Business Continuity Plans.
- Led majot Bank SOX implementation and transformation projects.
Education:
- Isik University – Electronic Engineering
Languages:
- English
Professional Background:
- 2017 – Today Mazars Denge, Information security services Leader, Istanbul
- 2 years Biznet, Head of PCI DSS and IT Consultancy, Istanbul
- 2 years Avivasa, Chief Information Security Officer, Istanbul
- 1 year EY, Manager, Istanbul
- 5 years Finansbank, Senior IT Auditor , Istanbul,
- 2 years Beymen, Foreign IT Operations and SAP Consultancy, Istanbul
- 1 year Havelsan, software instructor and field specialist Istanbul
Certificates:
- BRSA Banking Head Auditor
- PCI QSA (Certificate no - 203-786)
- CISA (Certificate no - 1085202)
- CISM (Certificate no - 1632565)
- ISO 27001 LA (Certificate no - TR-2011-04-29-1161)
Memberships:
- ISACA
- PCI Security Standards Council