Cyber Security Manager

Job Title: Cyber Security Manager

Employment Type: Full-time | Permanent | Remote

Location: We welcome applications from candidates across Bulgaria for this fully remote role.Please note that you will need to have the right to work in the Bulgaria, as we are currently unable to offer visa sponsorship.

WE ARE ZIGZAG - THE WORLD’S MOST CONNECTED POST-PURCHASE AND RETURNS NETWORK

We are an award-winning eCommerce returns and post purchase specialist, founded in 2015.

With over250 team members across the UK, Bulgaria, France, Portugal, Germany, and Spain, we are continually innovating the after-checkout experience for our retailers by reducing cost and complexity, driving sustainability, and fostering customer loyalty.

Today, our SaaS platform provides access to over 3,000 carrier lanes across 170 countries, supporting more 1,100 retailers including our leading enterprise and logistics clients The Very Group, New Look, Boden, Selfridges, Sports Direct, The Hut Group, Swarovski, L’Occitane, Photobox, Carrefour, Lands’ End and DHL.

We were the experts in returns. Now we are the experts in the whole post-purchase experience!

Discover more: https://www.zigzag.global/about-us

OUR CULTURE AND VALUES

Our culture is built on three core values, Start-up Spirit, Human Heart, and a Grown-up Mindset which guide how we collaborate and make decisions.

It isn’t something written on posters - it’s something we bring to life every day through our actions, our relationships, and how we show up for each other and our customers.

Everyone plays a role in shaping our culture through how we communicate, support one another, and celebrate success. Being a ZigZagger means taking ownership, bringing curiosity and energy to everything you do, showing resilience when challenges arise, and leading with care by putting “we before me.” You’ll use sound judgment, stay open to new perspectives, and continuously look for ways to learn, grow, and improve.

About the Role

As our Cyber Security Manager & Data Protection Officer (DPO), you will lead and strengthen security, privacy, and compliance across our SaaS platform, cloud infrastructure, and wider technology environment.

You will develop and deliver security and data protection strategies, manage cyber and privacy risks, ensure compliance with GDPR and industry standards, and protect both company and customer data. Working closely with Engineering, Product, DevOps, IT, Legal, and business leaders, you will champion security and privacy-by-design principles, drive best practice, and promote a strong culture of security awareness.

As the designated DPO, you will oversee data protection governance, provide expert GDPR guidance, and act as the key contact for privacy-related matters. This is a hands-on role combining strategic leadership with operational delivery, helping to safeguard the business, maintain customer trust, and support continued growth.

Core Responsibilities

Security Operations, Threat Detection & Incident Response

• Detect Attacks: Take a hands-on role in monitoring, detecting, investigating, and responding to cyber threats and security incidents affecting the organisation.
• Investigate Attacks: Investigate security alerts, suspicious activity, attempted intrusions, compromised accounts, and potential breaches.
• Prevent Attacks: Proactively identify and address security weaknesses through security assessments, hardening activities, and the implementation of appropriate technical controls.
• Respond to Breaches: Lead and coordinate the investigation and response to security incidents, including ransomware, phishing, credential theft, unauthorised access, account takeover, malicious API activity, and cloud infrastructure compromise. Maintain incident response plans and playbooks, conduct root-cause analysis, and drive remediation activities to strengthen security resilience.
• Manage Vulnerabilities: Lead vulnerability management activities, ensuring risks are identified, prioritised, remediated, and tracked to completion.
• Implement and manage security monitoring, detection, and response capabilities using technologies such as SIEM, EDR/XDR, cloud-native security monitoring, and other security tools.
• Analyse security logs, network activity, endpoint telemetry, and cloud events to identify indicators of compromise and potential attacks.
• Develop and maintain security detection rules, alerting capabilities, and automated security controls.
• Work closely with Engineering, DevOps, Infrastructure, and Product teams to secure applications, APIs, cloud infrastructure, and business systems.
• Conduct proactive threat hunting activities to identify suspicious behaviour, indicators of compromise, and emerging threats that may not trigger automated alerts.
• Manage relationships with external security providers, auditors, and incident response partners when specialist support is required.
• Improve Resilience: Ensure security incidents and assessments result in measurable improvements to controls, monitoring, and overall security resilience.

Governance, Risk & Compliance

• Own and maintain the organisation's Information Security Management System (ISMS).
• Maintain the information security risk register and conduct organisation-wide security risk assessments.
• Develop and maintain security policies, standards, procedures, and governance frameworks.
• Report on security posture, risks, incidents, and improvement initiatives to senior stakeholders.
• Ensure security and privacy requirements are embedded into business projects, products, and technology initiatives.
• Drive continuous improvement of security governance, risk management, and compliance capabilities.
• Oversee supplier and third-party security assurance activities.

Compliance & Audit

• Lead and maintain compliance with recognised standards and frameworks, including ISO 27001, SOC 2, Cyber Essentials Plus, GDPR, and other applicable regulatory requirements.
• Manage internal and external security, compliance, and data protection audits, ensuring ongoing audit readiness.
• Support customer security and privacy due diligence activities, including questionnaires, assessments, and audits.
• Assess security and data protection risks associated with third-party suppliers and service providers.
• Monitor emerging regulatory, security, and privacy requirements, ensuring policies, controls, and processes remain compliant and effective.
• Champion a culture of security and privacy by design, embedding security and privacy requirements throughout the organisation.

Data Protection Officer (DPO)

• Act as the organisation's appointed Data Protection Officer (DPO).
• Oversee data protection governance, privacy compliance, Data Protection Impact Assessments (DPIAs), and privacy risk management.
• Manage data subject rights requests, privacy incidents, breach management, and regulatory reporting obligations.
• Serve as the primary point of contact for regulators, customers, and internal stakeholders on data protection and privacy matters.
• Provide expert guidance on GDPR and wider privacy obligations across the business.

Training & Awareness

• Develop and deliver security awareness and privacy training programmes.
• Provide practical security guidance to technical and business teams.
• Promote a security-first culture across the organisation.

Leadership

• Lead and mentor security specialists or analysts where applicable.
• Manage external security vendors and consultants.
• Drive continuous improvement across security capabilities and processes.

Essential Technical Experience

The successful candidate must demonstrate:

• Proven hands-on experience leading cyber security investigations, incident response activities, and risk-based decision-making during security incidents.
• Experience implementing and managing Identity & Access Management (IAM) controls, including authentication, authorisation, privileged access, and identity governance.
• Experience leading vulnerability management programmes, including risk assessment, remediation, and reporting.
• Strong understanding of security architecture principles and secure-by-design approaches across SaaS and cloud environments.
• Experience designing and maintaining network security controls, including segmentation, firewalls, and secure connectivity.
• Expertise in endpoint security, including EDR/XDR, device management, and threat protection.
• Hands-on experience with SIEM technologies, including log analysis, alert tuning, threat detection, and investigation.
• Experience embedding DevSecOps practices into software development and deployment lifecycles.
• Strong knowledge of application security, including secure coding, security testing, and secure SDLC practices.
• Strong understanding of common cyber threats, attack techniques, threat actors, and exploitation methods.
• Hands-on experience securing SaaS applications, APIs, authentication systems, and cloud environments, ideally within AWS, Azure, or GCP.
• Strong stakeholder management and collaboration skills, with the ability to work effectively across Engineering, Infrastructure, DevOps, Product, and business teams.

Qualifications (Desirable)

• CISSP
• CISM
• CCSP
• ISO 27001 Lead Implementer or Lead Auditor
• Data protection qualification such as CIPP/E, CIPM, BCS Practitioner Certificate in Data Protection (PC.dp), or equivalent.

What We Offer

• 20 days’ annual leave plus public holidays, with additional holiday entitlement awarded for each completed year of service (up to a maximum of six extra days). Plus, to celebrate you, enjoy an extra day off on your birthday.
• Collaborative working environment
• Remote or hybrid work options - remote working with possibility to work from our Varna office
• Healthcare insurance with dental service included
• Food vouchers ( €102.26 month per person)

Explore our full range of benefits here: ZigZag Bulgaria Social Benefits.pdf

If you are interested, please send your CV in English.

Equity, Inclusion & Transparency

In line with the EU Pay Transparency Directive, we are committed to transparency and will share the salary range for this role prior to the interview stage.

A diverse and inclusive workplace where everyone feels a sense of belonging is a priority, and applications are welcomed from people of all backgrounds and experiences. Reflecting how we live our own values of meritocracy over hierarchy, even if not every requirement is met, interest in the role is encouraged.

Hiring focuses on people as well as skills-if this opportunity resonates, you’re encouraged to apply and bring your unique perspective.