b
bugra_ogut

Bugra Ogut

@bugra_ogut

ISO 27001 LA, ISO 42001 LA, ISO 27701 LA, GRC, Audit Readiness, Gap Assessment

Turkey
English, German, Turkish
About me
I have over 20 years of professional experience in Quality Management, Information Security, Governance, Risk, and Compliance. I help companies become audit-ready for ISO 27001, ISO 42001, ISO 27701, and other compliance frameworks by identifying gaps, prioritizing risks, preparing documentation, and building practical certification action plans. I have professional experience approximately 7 years in Siemens / Atos, and 3 years in Honda where ISO-based management systems, audits, process governance, and compliance activities were my core responsibilities.... Read more

Skills

b
bugra_ogut
Bugra Ogut
Offline • 

See my services

Programming & Tech
I will conduct an iso 27001 gap assessment and audit readiness review
From$2,500 / projectMore details

Work experience

Self_Employed

Principal Consultant

Self Employed • Self-employed

Mar 2026 - Present • 7 mos

Provided consultancy services for domestic and international clients and assess their current maturity level, identify gaps, prioritize risks, and prepare for audits against frameworks and standards such as ISO 27001, ISO 27701, ISO 20000, ISO 22301, ISO 42001, IEC 62443, KVKK, NIST SP 800 series, and CIS Controls Main areas of work: • ISO 27001 ISMS consultancy • Cybersecurity maturity assessments and gap analyses • Information and Communication Security Guide compliance audits • Audit preparation, evidence review, and corrective action follow-up Selected project examples: • Compliance audits for major critical infrastructure and enterprise organizations, including a leading regional airport in Türkiye.

Not Found

Full-time • 2 yrs 9 mos

Senior GRC Expert - ADEO BİLİŞİM DANIŞMANLIK HİZMETLERİ SAN. VE TİC. A.Ş.

May 2024 - Jan 2026 • 1 yr 8 mos

Senior GRC Expert in ADEO BİLİŞİM DANIŞMANLIK HİZMETLERİ SAN. VE TİC. A.Ş. Provided consultancy services for domestic and international clients and assess their current maturity level, identify gaps, prioritize risks, and prepare for audits against frameworks and standards such as ISO 27001, ISO 27701, ISO 20000, ISO 22301, IEC 62443, KVKK, NIST SP 800 series, and CIS Controls Main areas of work: • ISO 27001 ISMS consultancy • Cybersecurity maturity assessments and gap analyses • Information and Communication Security Guide compliance audits • Audit preparation, evidence review, and corrective action follow-up Selected project examples: • Cybersecurity maturity assessment for the DFIR Laboratory of the National Cyber Security Agency of a GCC country. • ISO 27001 ISMS consultancy for a leading shipyard company in Türkiye. • Compliance audits for major critical infrastructure and enterprise organizations, including one of Europe’s largest airports, a leading iron & steel and energy producer, and a reputable university, and a visa application center in Türkiye.

Business Processes Development and Quality Manager - OPTİMUM OTOMOTİV SATIŞ SONRASI ÇÖZÜMLERİ TİC. A.Ş.

Apr 2023 - May 2024 • 1 yr 1 mo

Business Processes Development and Quality Manager in OPTİMUM AUTOMOTIVE AFTER SALES SOLUTIONS Supported governance, risk, compliance, and information security activities in a SaaS and technology-driven business environment. Main areas of work: • Information security governance and compliance support • Risk assessment and control improvement activities • Policy, procedure, and documentation development • Internal process review and improvement recommendations • Audit readiness and evidence preparation • Support for customer security and compliance expectations • Alignment with ISO 27001, GDPR/KVKK, risk management, and related GRC requirements This experience strengthened my ability to translate compliance requirements into practical business processes for SaaS and technology companies