Ali S.

About

I help organizations build stronger security postures — from strategy to hands-on implementation.

With 15+ years of experience in cybersecurity, I work with companies across AI security & governance, security architecture, GRC (governance, risk and compliance) and technical security operations — delivering practical results, not just recommendations.

Recent work includes transforming the security environment for a globally recognized sports organization, where measurable outcomes included:

▪ 98% endpoint security coverage — built from scratch

▪ 91% reduction in open vulnerabilities across endpoints, web apps, and cloud

▪ 12% reduction in phishing susceptibility

▪ Secure SDLC implemented across 100% critical applications

I currently lead a security team spanning security operations, red team, and governance functions. Previously, I worked at Koç Holding — Turkey's largest conglomerate ($50B+ revenue, 100,000+ employees) — contributing to enterprise-wide security strategy, governance frameworks, compliance programs, and Red Team coordination across all group companies.

───────────────────────────────────

Areas I work in:

▪ Security architecture & engineering

▪ AI security & governance — acceptable-use policy, AI security posture management, preventing AI oversharing & data exposure

▪ AI-assisted development — security agents & tooling (Copilot Studio, GitHub Copilot, Claude Code)

▪ GRC & compliance — ISO 27001, PCI DSS, CIS Controls, Privacy Frameworks

▪ Microsoft 365 & Azure security

▪ Vulnerability management & risk assessment

▪ Email security, SIEM, endpoint protection

▪ Security awareness & training programs

Focus areas: Security programme leadership · Security architecture · Remote and distributed teams

CISM certified Security Professional

Executive education: Oxford · Harvard Business School · MIT Sloan

Specialties

• Azure Security
• Cybersecurity Consulting
• EDR
• Risk Management
• Security Engineering

Skills

• Security Architecture
• Threat Detection & Incident Response
• SIEM Engineering
• KQL
• Microsoft Sentinel
• QRadar
• EDR
• CIS Benchmarking
• Crowdstrike
• FortiGate

32 skills in total

Licenses & Certifications

• Certified Information Security Manager

  ISACA

  Issued Jun 2022

• AZ-900 Microsoft Certified: Azure Fundamentals

  Microsoft

  Issued Jan 2020

Experience

• Senior Cybersecurity Consultant

  CIGroupUSA LLC (Client: WTA Tennis)

  Jun 2023 — Present

  Remote

• Koç Holding A.Ş.

  • Cyber Security Manager

    Oct 2022 — Jun 2023

    Turkey

  • Sr. Cyber Security Expert

    Sep 2017 — Oct 2022

    Turkey

6 experiences in total

Education

• Harvard Business School

  Executive Program, Harvard Business School Disruptive Strategy Programme

  Oct 2020 — Dec 2020

• Oxford Saïd Business School

  Executive Program, Oxford Executive Leadership Programme

  Mar 2021 — May 2021

5 education entries in total

Recent posts