Merve Efe Head of IT Consultancy Services
Key Qualifications
• Performed COBIT-based (4.1 and 5) information technology and process audits at various companies; particularly
in the banking and financial sectors
• Performed assessment and consultancy on IT-related matters for Technical and Administrative Measures within
the scope of the Personal Data Protection Law (KVKK) in Turkey
• Involved gap analysis studies for IT processes within the scope of GDPR
• Performed information systems audit and consultancy projects within the scope of the Communiqué on the
Management and Audit of Information Systems of Payment Institutions and Electronic Money Institutions.
• Managed information systems audit within the scope of the Risk Center Information Security Policy and Control
Objectives of the Banks Association of Turkey
• Performed information systems audit for the Bank within the scope of Swift
• Managed information systems audit projects within the scope of the Communiqué on the Management and Audit
of Information Systems of Financial Leasing, Factoring and Financing Companies
• Managed information systems audit projects within the scope of the E-Document Special Integrators Information
Systems Audit Guide published by the Revenue Administration (GIB)
• Performed ISO 27001 information security compliance projects for different companies
• Implemented COBIT-based IT process’ compliance projects in different sectors, particularly in the airline industry
• Implemented consulting projects for alignment of IT processes within the Sarbanes-Oxley (SOX) law in banking
sector
• Prepared the control inventory for the audit to be used in the IT and process audits of banks
• Worked on a project to align IT policies and processes with Turkish legislation for a bank in preparation for its
operations in Turkey
• Within the scope of the Cryptocurrency exchange audit and assurance service, she carried out the works of
providing the Crypto wallet infrastructure security and general information technology controls.
Education
• Marmara University - Engineering Management Bachelor Degree, Istanbul, Turkey
• Istanbul Ticaret University - Industrial Engineering Masters Degree, Istanbul, Turkey
Language(s)
• English
• German
Professional Background
• 2022 - cont. Mazars Denge, Istanbul, Head of IT Audit, Security and Consultancy
• 2020 - 2022 Mazars Denge, Istanbul, IT Audit, Security and Consultancy, Director
• 2017 - 2020 Mazars Denge, Istanbul, IT Audit, Security and Consultancy, Senior Manager
• 2015 - 2017 Ernst & Young (EY), Advisory Department IT Risk Manager
• 2011 - 2015 Ernst & Young (EY), Advisory Department IT Risk Consultant
• 2010 - 2011 ICC Consultancy, Process Analyst
Certificate(s)
• ISO 27001 Lead Auditor
• TOGAF 9
• ITIL Foundation
• Swift Customer Security Controls Framework
Membership(s)
• ISACA