Mehmet Eren Buyru

Cybersecurity Leader | IT Advisory & Compliance Expert

Üsküdar, TR.

About

I don’t just secure networks; I protect business continuity and enterprise reputation. With over a decade of experience across Big 4 consultancy (KPMG) and leading financial institutions, I specialize in transforming cybersecurity from a "cost center" into a strategic advantage. Currently serving as CISO at Edenred Türkiye, I recently led our team to achieve a 'B' Cyberscore, ranking #2 in the EMEA region. High-growth companies and established enterprises partner with me because I understand both sides of the coin: the technical precision of a Red Team Lead and the strategic foresight of a Cyber Executive. How I help organizations: • Strategic Leadership: Building and scaling security departments that align with global standards (ISO 27001, SOC2). • Risk Optimization: Identifying vulnerabilities before they become liabilities, moving from reactive "firefighting" to proactive resilience. • Offensive Security: Leveraging my background in penetration testing and infrastructure hacking to stress-test your defenses against real-world threats. • Compliance & Governance: Navigating complex regulatory landscapes in FinTech and beyond. Whether I’m designing modular security tools or presenting risk postures to the board, my goal is simple: Zero surprises. Maximum resilience.

Work

Edenred Turkey

|

Cyber Security, Executive (CISO)

Istanbul, , Türkiye

→

Summary

Leads comprehensive cybersecurity initiatives, developing and executing strategies to protect information systems and data while managing a team of professionals.

Highlights

Developed and executed robust, organization-wide cybersecurity strategies, enhancing the protection of critical information systems and data.

Managed and mentored a team of cybersecurity professionals, improving threat detection, incident response capabilities, and overall team performance.

Conducted comprehensive risk assessments and implemented proactive mitigation measures, significantly reducing identified security vulnerabilities.

Led critical incident response efforts for security breaches and cyber-attacks, minimizing impact and ensuring business continuity.

Collaborated cross-functionally to establish and enforce stringent security policies and procedures, ensuring organization-wide compliance.

Performed regular security audits and penetration tests, identifying weaknesses and fortifying the organization's security posture.

Designed and delivered cybersecurity training programs to employees, fostering a security-conscious culture and ensuring adherence to industry standards.

KPMG Turkey

|

IT Advisory, Senior Manager

Istanbul, , Türkiye

→

Summary

Led IT advisory projects with a focus on Cyber Security Services, managing project teams and ensuring high-quality deliverables for diverse clients.

Highlights

Managed and guided project teams, assigning tasks, reviewing deliverables, and providing expert assistance to ensure successful project execution and client satisfaction.

Specialized in delivering Cyber Security Services, advising clients on best practices and solutions for complex security challenges.

Contributed to the firm's reputation in IT advisory by consistently delivering high-quality, impactful cybersecurity consulting.

Maintained a focus on cutting-edge cyber security services, ensuring clients were protected against emerging threats.

KPMG Turkey

|

IT Advisory, Manager

Istanbul, , Türkiye

→

Summary

Managed IT advisory projects with a primary focus on Cyber Security Services, overseeing team tasks and ensuring project success for various clients.

Highlights

Led project teams, providing guidance, task assignment, and review to ensure efficient delivery of IT advisory services and client objectives were met.

Concentrated on Cyber Security Services, advising clients on best practices and solutions for their security challenges.

Facilitated seamless project workflows by coordinating team efforts and stakeholder communications.

Ensured project deliverables met KPMG's quality standards and client expectations.

BTCTrader (BtcTurk)

|

Information Security, Cyber Security Senior Specialist (Red Team Leader)

Istanbul, , Türkiye

→

Summary

Led the Red Team within the Information Security department, focusing on application and infrastructure security for a cryptocurrency trading platform.

Highlights

Supervised and led the Red Team, enhancing security for BtcTurk's trading platform and critical infrastructure against advanced threats.

Conducted advanced application and infrastructure security tests, identifying critical vulnerabilities and strengthening defensive mechanisms.

Performed comprehensive penetration testing and compliance assessments, ensuring adherence to industry best practices and regulatory requirements.

Contributed to the overall security posture of a high-stakes cryptocurrency platform, protecting user assets and data.

KPMG Turkey

|

IT Advisory, Senior Consultant

Istanbul, , Türkiye

→

Summary

Supervised and guided project teams within IT Advisory, focusing on Cyber Security Services and ensuring efficient project delivery.

Highlights

Supervised project teams, providing guidance, assigning tasks, and reviewing work to ensure high-quality IT advisory deliverables.

Focused on delivering Cyber Security Services, supporting clients in achieving robust security postures and compliance.

Managed project timelines and resources effectively, contributing to the successful completion of advisory engagements.

Mentored junior team members, fostering their professional growth in complex IT advisory projects.

KPMG Turkey

|

IT Advisory, Consultant

Istanbul, , Türkiye

→

Summary

Executed IT advisory projects, focusing on design and operating effectiveness of business processes, cyber security assessments, and compliance frameworks.

Highlights

Executed IT advisory projects, enhancing the design and operating effectiveness of business processes for diverse clients.

Conducted and managed Sarbanes-Oxley (SOX) related testing, ensuring the adequacy of internal controls within client organizations.

Performed cyber security assessments, identifying vulnerabilities and recommending mitigation strategies to strengthen client defenses.

Conducted IT internal audits, ISO27001, and ITGC projects, ensuring compliance with industry standards and regulatory requirements.

Analyzed business processes and implemented Robotic Process Automation (RPA) workflows, automating key business processes for increased efficiency.

Assisted in SAP GRC implementation projects, contributing to enhanced governance, risk, and compliance frameworks.

KPMG Turkey

|

IT Advisory, Analyst

Istanbul, , Türkiye

→

Summary

Supported IT advisory projects, gaining foundational experience in cyber security, IT internal audit, and compliance assessments.

Highlights

Assisted in IT advisory projects, supporting the execution of design and operating effectiveness assessments for business processes.

Contributed to cyber security assessments, identifying potential risks and supporting the development of mitigation plans.

Participated in IT internal audit, ISO27001, and ITGC projects, learning compliance frameworks and best practices.

Supported the analysis of business processes and the implementation of RPA workflows, contributing to automation initiatives.

Gained hands-on experience in RPA, penetration testing, COBIT, SOX, and ISO 27001 assessments, forming a strong technical base.

ProTim İletişim

|

Telecommunication Support Department (IT Internship)

, , Türkiye

→

Summary

Gained practical experience in telecommunication support, assisting with department operations and technical tasks.

Highlights

Supported the Telecommunication Support Department, assisting with daily operations and technical troubleshooting.

Learned about telecommunication systems and network infrastructure through hands-on involvement.

Comodo Inc.

|

IT Internship

, , Türkiye

→

Summary

Participated in IT operations at Comodo Inc., focusing on various aspects of information technology.

Highlights

Assisted IT teams with various tasks, gaining exposure to real-world IT environments and security practices.

Supported day-to-day IT operations, contributing to system maintenance and user support.

Hisar School

|

IT Internship

Istanbul, , Türkiye

→

Summary

Gained initial IT experience at Hisar School, supporting technical operations and learning foundational IT skills.

Highlights

Provided IT support for school systems, assisting with hardware and software maintenance.

Learned about basic network configurations and user support in an educational setting.

Education

University of Leeds

Leeds, United Kingdom, United Kingdom of Great Britain and Northern Ireland
→
MSc (PG) Mobile Computing and Communication Networks Grade:

Istanbul Bilgi University

Istanbul, , Türkiye
→
BE Computer Engineering Grade: 2.98/4.00

Hisar School High School

Istanbul, , Türkiye
→
High School Diploma General Studies Grade:

Certificates

CompTIA Security+

CompTIA

TSE Certified Senior Penetration Tester (TSE Kıdemli Sızma Testi Uzmanı)

Turkish Standards Institution

CEH v11 Training

EC-Council

ISO27001 Lead Auditor Certificate

ISO

ISO22301 Lead Auditor Certificate

ISO

ITIL Foundation

AXELOS

StackSkills, Python 3 For Offensive PenTest

StackSkills

UiPath Advanced RPA Developer Certificate

UiPath

StackSkills, The complete Cyber Security Course, Vol. 1 Hackers Exposed

StackSkills

UiPath Advanced RPA Trainings

UiPath

Goethe Institute German Language Certificate (A2)

Goethe-Institut

IELTS Certificate

British Council

Adobe Photoshop and Dreamweaver Certificate

Adobe

Arduino Programming

Self-Study

LSE Summer School – Global Young Leaders

London School of Economics

Skills

Cybersecurity & Information Security

Cyber Security Strategy, Threat Detection & Response, Risk Assessment & Mitigation, Incident Response, Security Audits, Penetration Testing, Vulnerability Scanning, Security Policies & Procedures, Compliance Assessments (ISO 27001, COBIT, SOX, ITGC, KVKK), Application Security, Infrastructure Security, Red Teaming, WAF & Load Balancer Configuration (Cloudflare), Kubernetes Security Controls, Networking Infrastructure Management, IT Risk Analysis.

IT Advisory & Consulting

IT Advisory, Business Process Analysis & Digitalization, RPA Process Design & Development (UiPath Studio), SAP GRC Implementation, IT Internal Audit, Client Management, Consulting.

Programming & Development

C Programming, Objective C Programming, Swift Programming, JAVA Programming, Arduino Programming, Computer Programming, UiPath Studio, RPA Development.

Cloud & Infrastructure

Cloud Computing (OpenNebula, Open Stack), Big Data (Hadoop, Spark), Communication Networks and Architecture, Cisco Network Configuration, Networking Infrastructure Management, Computer OS (Macintosh OS, Windows, Linux).

Project & Team Management

Team Leadership, Project Planning & Management, Team Scheduling & Task Distribution, Cross-functional Collaboration, Stakeholder Engagement, Mentorship.

Software & Tools

Microsoft Office, UiPath Studio, Adobe Photoshop, Dreamweaver, Cloudflare, SDN Simulators.

Languages

English

Fluent

German

Basic

Turkish

Native

Interests

Hobbies

Playing piano, Watching movies, Photography, Making model airplanes and cars.

Financial & Technology Trends

Technology News and Innovations, Cryptocurrency, Stock markets, Investing.

Publications

Eren Buyru Personal Website

Projects

Network Congestion Control Project - University of Leeds

→

Summary

A dissertation project involving research on network congestion control methods, specifically developing a new model using Software Defined Networking Technologies.

iOS Game Development

→

Summary

Developed an iOS game using Swift programming language during studies at the University of Leeds.

Vehicle Crash Avoidance Systems

→

Summary

An undergraduate dissertation project focused on developing a new prototype crash avoidance system using Arduino and an R/C car.

Network Infrastructure Plan and Deployment for a Health Company

→

Summary

Developed and implemented a comprehensive network infrastructure plan for a health company in Istanbul.