Garanti BBVA International 

Security Engineer

• Performing information and cyber security risk assessments and business impact assessments
• Performing cloud and vendor risk assessments
• Maintaining and managing Information Security Management System (ISMS) programme based on industry standards such as ISO2700x and COBIT
• Designing security controls on Microsoft 365 suite (SharePoint, Outlook, Entra ID, mobile device management)
• Planning and designing security frameworks and assisting to security architecture on various technology stacks such as Azure, applications, middleware, databases, networks etc
• Advising and consulting multiple IT projects through all phases of standard project lifecycles
• Defining, implementing and maintaining corporate security policies, procedures and controls
• Reviewing and monitoring vulnerability management and security hardening programme
• Performing, managing and coordinating penetration tests
• Managing information security risk reviews and mitigation follow-ups
• Contributing to information security policies and procedures reviews
• Managing data security and data governance (Microsoft Purview) tools
• Managing and maintaining security event monitoring (SIEM) systems
• Acting as Business Continuity advisor, participating in Disaster Recovery (DR) drills, and giving recommendations for improvements
• Assisting information security self-assessments in different security domains and regulation frameworks to ensure that the organization is compliant with relevant industry standards and regulatory requirements such as DORA, GDPR
• Collaborating with third party auditors during IT audits and contributing mandatory regulatory self-assessments such as DORA

Information Security Risk Specialist

Financial Planning and Analysis

• Assist in drafting, reviewing, and organizing finance-related legal documents such as guarantees, letters of credit, and facility agreements.
• Conduct legal research on EU and Dutch financial regulations, banking law, and regulatory changes.
• Support the Legal Counsel team with transaction processes and compliance-related matters.
• Collaborate with internal departments such as Risk, Compliance, and Finance on legal and regulatory issues.
• Help monitor developments in EU and Dutch prudential supervision and assist with internal updates.
• Provide general support on administrative and organizational tasks within the Legal Department.

Legal Intern – Banking & Finance

Robotics

• Lead development of advanced analytics, machine learning and intelligent automation initiatives.
• Build and manage Power Automate cloud flows, desktop flows (RPA), and IDP solutions using AI Builder or Azure Form Recognizer.
• Automate business workflows and document processing across Operations, Finance and Risk.
• Integrate GenAI services (e.g., ChatGPT Enterprise, Custom GPT, Azure OpenAI or Copilot Studio) into automation scenarios.
• Develop and maintain machine learning and GenAI-powered models for prediction, classification, document generation, and summarization use cases.
• Apply best practices in feature engineering, training, evaluation, and model retraining strategies.
• Explore and implement domain-specific applications of large language models (LLMs), including prompt engineering and fine-tuning.
• Collaborate with IT, Legal, DPO, and Compliance to establish the organization's AI governance framework.
• Define AI/ML policies, risk assessment procedures, and usage guidelines to ensure responsible and ethical AI deployment.
• Contribute to the design of a secure, scalable AI infrastructure, enabling both in-house model training and safe API-based GenAI usage.
• Support integration of AI tools into Microsoft ecosystem (e.g., Azure AI Services, Power Platform, M365 Copilot).
• Act as a subject matter expert and enabler for AI initiatives across departments.
• Maintain structured documentation for models, automation flows, and governance artifacts.

Information Security Risk Specialist

Legal Intern – Banking & Finance

RPA Developer – Data Scientist