Buğra Öğüt

Senior GRC Expert

Provided GRC consultancy to assess client maturity, identify gaps, prioritize risks, and prepare audit readiness for ISO/IEC and regulatory frameworks including ISO 27001, ISO 27701, ISO 20000, ISO 22301, IEC 62443, KVKK, NIST SP 800 series, and CIS Controls. Delivered cybersecurity maturity assessments and ISMS consulting engagements for domestic and international clients.

ISO 27001ISO 27701KVKKCISRisk AssessmentAudit Readiness

Business Processes & Quality Manager

Supported governance, risk, compliance, and information security activities in a SaaS/technology-driven environment by improving risk controls, preparing audit evidence, and recommending internal process improvements. Helped align business processes with ISO 9001, ISO 27001, ISO 27701, ISO 22301, and KVKK requirements.

GRCInformation Security GovernanceRisk AssessmentAudit ReadinessISO 9001ISO 27001ISO 27701KVKK

Governance, Risk and Compliance Manager

ODC İş Çözümleri Danışmanlık A.Ş.

Improved compliance posture and information security governance by strengthening internal processes, documentation, and audit readiness for security, data protection, risk management, and business continuity requirements. Developed policies and procedures and supported customer security/compliance expectations aligned to ISO standards and GDPR/KVKK.

Compliance ManagementInformation Security GovernanceRisk ManagementISO 9001ISO 27001ISO 27701GDPRKVKKISO 22301 Framework

Contracted Auditor

Planned, conducted, and reported ISO 27001, ISO 22301, ISO 20000-1 internal audits for BTYÖN's clients. Produced audit results and supported assessment activities across diverse client industries.

ISO 27001Internal AuditAudit PlanningAudit Reporting

Quality and Process Manager

Supported ISO 9001, ISO 20000, ISO 27001, and ITIL-based management systems through process analysis, documentation, and continuous improvement activities. Helped align internal processes and controls with KVKK/GDPR personal data protection requirements.

ISO 9001ISO 27001ITILProcess AnalysisContinuous Improvement

Quality Manager

Managed governance, risk, compliance, and information security activities by improving compliance posture, security practices, internal processes, documentation, and audit readiness. Supported alignment with ISO 27001 and GDPR/KVKK requirements for risk management and business continuity.

ISO 27001GDPRKVKKRisk AssessmentAudit ReadinessInformation Security Governance

Business Excellence Specialist

Supported quality management, process governance, documentation, internal audit preparation, and compliance-related activities in the energy management sector. Coordinated corrective/preventive action tracking and audit evidence management to support continuous improvement and customer expectations.

Quality Management SystemsProcess GovernanceInternal AuditingCompliance ManagementProcess documentationContinuous ImprovementAudit Evidence

Quality, Security and Risk Specialist

Atos Bilişim ve Danışmanlık A.Ş.

Supported enterprise IT services environments with ISO-based management system activities, including quality management, information security, internal audits, and governance documentation. Contributed to implementation, maintenance, and improvement of ISO 9001, ISO 27001, and ISO 20000-aligned processes and certification readiness.

ISO 9001ISO 27001IT Service ManagementInformation Security ManagementInternal Auditing

Quality Development Engineer

Supported quality management and process improvement in automotive manufacturing through documentation, internal control activities, and corrective action management. Performed process reviews and contributed to root cause analysis, corrective/preventive action follow-up, and continuous improvement.

Quality ManagementProcess ImprovementRoot Cause AnalysisCorrective And Preventive ActionsInternal Audit ManagementProcess documentationContinuous Improvement

Quality Assurance Officer

Established and applied the AQAP-2120 NATO Quality Management System in a maintenance center command environment and trained military and civilian personnel. Produced QMS documentation including quality manual content, policies, procedures, plans, instructions, and templates.

AQAP 2120Training

Project Executive

Provided client consultancy for ISO 9001, ISO 14001, and ISO 45001 management systems. Supported management system adoption through advisory and implementation guidance.

ISO 9001ISO 14001ISO 45001Implementation SupportClient Advisory