Principal Consultant and Auditor

Bugra Ogut Consultancy

Internet & IT

< 10 team member

Provided consultancy, assessment, and audit services against frameworks and standards such as ISO 27001, ISO 27701, ISO 20000, ISO 22301, ISO 42001, IEC 62443, KVKK, NIST AI RMF, NIST CSF, NIST SP 800 series, and CIS Controls.

Main areas of work:

• ISO 27001, ISO 27701, ISO 20000, ISO 22301, ISO 42001 consultancy and audit-readiness

• Cybersecurity maturity assessments and gap analyses

• Information and Communication Security Guide compliance audits

Selected project examples:

• Compliance audits for major critical infrastructure and enterprise organizations, including a leading regional airport in Türkiye.

• Consultancy services for an AI Governance and Compliance Platform in the USA.

Consultant and Auditor

Perseus Bilgi Guvenlik Teknolojileri Danismanlik Tic. A.S.

Other

< 10 team member

Provided consultancy, assessment, and audit services against frameworks and standards such as ISO 27001, IEC 62443, NIST CSF, NIST SP 800 series.

Main areas of work:

• ISO 27001 ISMS consultancy

• Cybersecurity maturity assessments and gap analyses

• EMRA Cybersecurity Competence Model compliance audits for major energy infrastructure companies

• Audit preparation, evidence review, and corrective action follow-up

Senior GRC Expert

Adeo Bilisim Danismanlik Hizmetleri San. ve Tic. A.S.

Internet & IT

50-250 team member

Provided consultancy for domestic and international clients, assessment, and audit services against frameworks and standards such as ISO 27001, ISO 27701, ISO 20000, ISO 22301, IEC 62443, KVKK, NIST SP 800 series, and CIS Controls

Main areas of work:

• ISO 27001 ISMS consultancy

• Cybersecurity maturity assessments and gap analyses

• Information and Communication Security Guide compliance audits

• Audit preparation, evidence review, and corrective action follow-up

Selected project examples:

• Cybersecurity maturity assessment for the DFIR Laboratory of the National Cyber Security Agency of a GCC country

• ISO 27001 ISMS consultancy for a leading shipyard company in Türkiye

• Compliance audits for major critical infrastructure and enterprise organizations, including one of Europe’s largest airports, a leading iron & steel and energy production company, and a reputable university, and a visa application center in Türkiye.

Business Processes Development and Quality Manager

Optimum Otomotiv Satis Sonrasi Cozumleri Tic. A.S.

Automotive & Vehicle Manufacturing

50-250 team member

Supported governance, risk, compliance, and information security activities in a SaaS and technology-driven business environment.

Main areas of work:

• Information security governance and compliance support

• Risk assessment and control improvement activities

• Policy, procedure, and documentation development

• Internal process review and improvement recommendations

• Audit readiness and evidence preparation

• Support for customer security and compliance expectations

• Alignment with ISO 27001, GDPR/KVKK, risk management, and related GRC requirements

This experience strengthened my ability to translate compliance requirements into practical business processes for SaaS and technology companies.

Governance, Risk and Compliance Manager

ODC Is Cozumleri Danismanlik Tic. A.S.

Internet & IT

10-50 team member

Worked on improving compliance posture, information security practices, internal processes, documentation, and audit readiness for standards and frameworks related to information security, data protection, risk management, and business continuity.

Main areas of work:

• Information security governance and compliance support

• Risk assessment and control improvement activities

• Policy, procedure, and documentation development

• Internal process review and improvement recommendations

• Audit readiness and evidence preparation

• Support for customer security and compliance expectations

• Alignment with ISO 27001, GDPR/KVKK, risk management, and related GRC requirements

Contracted Auditor

Btyon Teknoloji A.S.

Other

< 10 team member

Planned, conducted, and reported ISO 27001, ISO 22301, ISO 20000-1 internal audits of BTYÖN's clients.

Selected project examples:

• A leading technology company of one of the largest holding companies of Türkiye.

• An international company operating in the agriculture and food sector, producing feed, farm and food products.

• An international automobile manufacturing, marketing, and distribution company.

Quality and Process Manager

Odeon Yazilim ve Teknoloji A.S.

Internet & IT

50-250 team member

Responsible for supporting management systems based on ISO 9001, ISO 20000, ISO 27001, and ITIL practices.

Contributed to process analysis, process development, documentation, and continuous improvement activities across quality management, IT service management, information security, and compliance processes.

Supported personal data protection compliance activities in line with KVKK and GDPR requirements, helping align internal processes, documentation, and controls with applicable data protection obligations.

Quality Manager

Optimum Otomotiv Satis Sonrasi Cozumleri Tic. A.S.

Automotive & Vehicle Manufacturing

50-250 team member

Supported governance, risk, compliance, and information security activities in a SaaS and technology-driven business environment.

Worked on improving compliance posture, information security practices, internal processes, documentation, and audit readiness for standards and frameworks related to information security, data protection, risk management, and business continuity.

Main areas of work:

• Information security governance and compliance support

• Risk assessment and control improvement activities

• Policy, procedure, and documentation development

• Internal process review and improvement recommendations

• Audit readiness and evidence preparation

• Support for customer security and compliance expectations

• Alignment with ISO 27001, GDPR/KVKK, risk management, and related GRC requirements

This experience strengthened my ability to translate compliance requirements into practical business processes for SaaS and technology companies.

Business Excellence Specialist

Siemens Sanayi ve Ticaret A.S.

Energy, Water & Environment

1000-5000 team member

Supported quality management, process governance, documentation, internal audit, and compliance-related activities in the energy management sector.

Worked in a structured corporate environment where quality, operational discipline, process control, documentation, and continuous improvement were critical for business performance and customer expectations.

Main areas of work:

• Quality management system

• Process documentation and improvement

• Internal audit preparation and follow-up

• Corrective and preventive action tracking

• Compliance with corporate and management system requirements

• Coordination with cross-functional teams for process and quality improvements

• Support for audit evidence preparation and management system reporting

This experience contributed to my understanding of quality, compliance, and operational control in energy and critical infrastructure-related environments.

Quality, Security and Risk Specialist

Atos Bilisim ve Danismanlik A.S. (former Siemens IT Solutions and Services)

Internet & IT

50-250 team member

Worked in enterprise IT services environments under Siemens and Atos, managing quality, information security, process governance, internal audits, documentation, and ISO-based management system activities.

Contributed to the implementation, maintenance, and improvement of management systems aligned with international standards such as ISO 9001, ISO 27001, ISO 20000, and related IT service management and information security requirements.

Main areas of work:

• ISO-based management system implementation and maintenance

• Internal audit planning, execution, and follow-up

• Quality, information security and IT service management documentation

• Management system performance monitoring and reporting

• Process documentation, procedure development, and evidence preparation

• Support for external audits and certification readiness activities

This role provided strong hands-on experience in how ISO management systems operate in large, international IT service organizations.

Quality Development Engineer

Honda Turkiye A.S.

Automotive & Vehicle Manufacturing

500-1000 team member

Worked in the automotive sector, supporting quality management, process improvement, documentation, internal control, and corrective action activities in a highly structured manufacturing and operational environment.

Gained practical experience in quality discipline, process standardization, root cause analysis, corrective action management, and continuous improvement practices.

Main areas of work:

• Quality management system

• Process review and improvement activities

• Documentation and procedure management

• Corrective and preventive action follow-up

• Internal audit management

• Root cause analysis and improvement recommendations

• Cross-functional coordination with operational teams

This experience built a strong foundation in quality management, process discipline, and continuous improvement.

Quality Assurance Officer (Compulsory Military Service)

Turkish Army Land Forces Command 55th Maintenance Center Command

Government and Public Services

1000-5000 team member

Established and applied AQAP-2120 NATO Quality Management System in 55th Maintenance Center Command.

Trained military and civilian personnel.

Prepared quality manual, policies, procedures, plans, instructions, and templates of AQAP-2120 QMS.

Project Executive

A-Kalite Danismanlik ve Egitim Ltd. Sti.

Other

< 10 team member

Provided consultancy of ISO 9001, ISO 14001, and ISO 45001 management systems to clients.

GRC | Consultant & Auditor | ISO 27001 LA, ISO 27701 LA, ISO 42001 LA

Profile attachments

About me

Experience

Languages

Project history

Principal Consultant and Auditor

Consultant and Auditor

Senior GRC Expert

Business Processes Development and Quality Manager

Governance, Risk and Compliance Manager

Contracted Auditor

Quality and Process Manager

Quality Manager

Business Excellence Specialist

Quality, Security and Risk Specialist

Quality Development Engineer

Quality Assurance Officer (Compulsory Military Service)

Project Executive

Certificates

Portfolio

Contact form