{"id":3868970,"url":"https://alion.io/job/zigzag-global-cyber-security-manager","title":"Cyber Security Manager","company":{"id":456211,"name":"ZigZag Global","domain":"zigzag.global","url":"https://alion.io/company/zigzag-global-2","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Pinpoint","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Varna, Bulgaria"],"countries":["BG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-11-05T13:33:18Z","employer_posted_date":"2026-11-05","last_verified_at":"2026-11-07T07:29:14Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Job Title: Cyber Security Manager\nEmployment Type: Full-time | Permanent | Remote\nLocation: We welcome applications from candidates across Bulgaria for this fully remote role.Please note that you will need to have the right to work in the Bulgaria, as we are currently unable to offer visa sponsorship.\n\nWE ARE ZIGZAG - THE WORLD’S MOST CONNECTED POST-PURCHASE AND RETURNS NETWORK\nWe are an award-winning eCommerce returns and post purchase specialist, founded in 2015.\nWith over250 team members across the UK, Bulgaria, France, Portugal, Germany, and Spain, we are continually innovating the after-checkout experience for our retailers by reducing cost and complexity, driving sustainability, and fostering customer loyalty.\nToday, our SaaS platform provides access to over 3,000 carrier lanes across 170 countries, supporting more 1,100 retailers including our leading enterprise and logistics clients The Very Group, New Look, Boden, Selfridges, Sports Direct, The Hut Group, Swarovski, L’Occitane, Photobox, Carrefour, Lands’ End and DHL.\nWe were the experts in returns. Now we are the experts in the whole post-purchase experience!\n Discover more: https://www.zigzag.global/about-us\n\nOUR CULTURE AND VALUES\n Our culture is built on three core values, Start-up Spirit, Human Heart, and a Grown-up Mindset which guide how we collaborate and make decisions.\nIt isn’t something written on posters - it’s something we bring to life every day through our actions, our relationships, and how we show up for each other and our customers.\nEveryone plays a role in shaping our culture through how we communicate, support one another, and celebrate success. Being a ZigZagger means taking ownership, bringing curiosity and energy to everything you do, showing resilience when challenges arise, and leading with care by putting “we before me.” You’ll use sound judgment, stay open to new perspectives, and continuously look for ways to learn, grow, and improve.\nAbout the Role\nAs our Cyber Security Manager & Data Protection Officer (DPO), you will lead and strengthen security, privacy, and compliance across our SaaS platform, cloud infrastructure, and wider technology environment.\nYou will develop and deliver security and data protection strategies, manage cyber and privacy risks, ensure compliance with GDPR and industry standards, and protect both company and customer data. Working closely with Engineering, Product, DevOps, IT, Legal, and business leaders, you will champion security and privacy-by-design principles, drive best practice, and promote a strong culture of security awareness.\nAs the designated DPO, you will oversee data protection governance, provide expert GDPR guidance, and act as the key contact for privacy-related matters. This is a hands-on role combining strategic leadership with operational delivery, helping to safeguard the business, maintain customer trust, and support continued growth.\nCore Responsibilities\n\nSecurity Operations, Threat Detection & Incident Response\nDetect Attacks: Take a hands-on role in monitoring, detecting, investigating, and responding to cyber threats and security incidents affecting the organisation.\nInvestigate Attacks: Investigate security alerts, suspicious activity, attempted intrusions, compromised accounts, and potential breaches.\nPrevent Attacks: Proactively identify and address security weaknesses through security assessments, hardening activities, and the implementation of appropriate technical controls.\nRespond to Breaches: Lead and coordinate the investigation and response to security incidents, including ransomware, phishing, credential theft, unauthorised access, account takeover, malicious API activity, and cloud infrastructure compromise. Maintain incident response plans and playbooks, conduct root-cause analysis, and drive remediation activities to strengthen security resilience.\nManage Vulnerabilities: Lead vulnerability management activities, ensuring risks are identified, prioritised, remediated, and tracked to completion.\nImplement and manage security monitoring, detection, and response capabilities using technologies such as SIEM, EDR/XDR, cloud-native security monitoring, and other security tools.\nAnalyse security logs, network activity, endpoint telemetry, and cloud events to identify indicators of compromise and potential attacks.\nDevelop and maintain security detection rules, alerting capabilities, and automated security controls.\nWork closely with Engineering, DevOps, Infrastructure, and Product teams to secure applications, APIs, cloud infrastructure, and business systems.\nConduct proactive threat hunting activities to identify suspicious behaviour, indicators of compromise, and emerging threats that may not trigger automated alerts.\nManage relationships with external security providers, auditors, and incident response partners when specialist support is required.\nImprove Resilience: Ensure security incidents and assessments result in measurable improvements to controls, monitoring, and overall security resilience.\n Governance, Risk & Compliance\nOwn and maintain the organisation's Information Security Management System (ISMS).\nMaintain the information security risk register and conduct organisation-wide security risk assessments.\nDevelop and maintain security policies, standards, procedures, and governance frameworks.\nReport on security posture, risks, incidents, and improvement initiatives to senior stakeholders.\nEnsure security and privacy requirements are embedded into business projects, products, and technology initiatives.\nDrive continuous improvement of security governance, risk management, and compliance capabilities.\nOversee supplier and third-party security assurance activities.\nCompliance & Audit\nLead and maintain compliance with recognised standards and frameworks, including ISO 27001, SOC 2, Cyber Essentials Plus, GDPR, and other applicable regulatory requirements. \nManage internal and external security, compliance, and data protection audits, ensuring ongoing audit readiness. \nSupport customer security and privacy due diligence activities, including questionnaires, assessments, and audits. \nAssess security and data protection risks associated with third-party suppliers and service providers. \nMonitor emerging regulatory, security, and privacy requirements, ensuring policies, controls, and processes remain compliant and effective. \nChampion a culture of security and privacy by design, embedding security and privacy requirements throughout the organisation.\n Data Protection Officer (DPO)\nAct as the organisation's appointed Data Protection Officer (DPO).\nOversee data protection governance, privacy compliance, Data Protection Impact Assessments (DPIAs), and privacy risk management.\nManage data subject rights requests, privacy incidents, breach management, and regulatory reporting obligations.\nServe as the primary point of contact for regulators, customers, and internal stakeholders on data protection and privacy matters.\nProvide expert guidance on GDPR and wider privacy obligations across the business.\nTraining & Awareness\nDevelop and deliver security awareness and privacy training programmes.\nProvide practical security guidance to technical and business teams. \nPromote a security-first culture across the organisation.\nLeadership\nLead and mentor security specialists or analysts where applicable.\nManage external security vendors and consultants.\nDrive continuous improvement across security capabilities and processes.\nEssential Technical Experience\n The successful candidate must demonstrate:\nProven hands-on experience leading cyber security investigations, incident response activities, and risk-based decision-making during security incidents.\nExperience implementing and managing Identity & Access Management (IAM) controls, including authentication, authorisation, privileged access, and identity governance. \nExperience leading vulnerability management programmes, including risk assessment, remediation, and reporting. \nStrong understanding of security architecture principles and secure-by-design approaches across SaaS and cloud environments. \nExperience designing and maintaining network security controls, including segmentation, firewalls, and secure connectivity. \nExpertise in endpoint security, including EDR/XDR, device management, and threat protection. \nHands-on experience with SIEM technologies, including log analysis, alert tuning, threat detection, and investigation. \nExperience embedding DevSecOps practices into software development and deployment lifecycles. \nStrong knowledge of application security, including secure coding, security testing, and secure SDLC practices. \nStrong understanding of common cyber threats, attack techniques, threat actors, and exploitation methods. \nHands-on experience securing SaaS applications, APIs, authentication systems, and cloud environments, ideally within AWS, Azure, or GCP.\nStrong stakeholder management and collaboration skills, with the ability to work effectively across Engineering, Infrastructure, DevOps, Product, and business teams.\n Qualifications (Desirable)\nCISSP\nCISM\nCCSP\nISO 27001 Lead Implementer or Lead Auditor\nData protection qualification such as CIPP/E, CIPM, BCS Practitioner Certificate in Data Protection (PC.dp), or equivalent.\nWhat We Offer\n20 days’ annual leave plus public holidays, with additional holiday entitlement awarded for each completed year of service (up to a maximum of six extra days). Plus, to celebrate you, enjoy an extra day off on your birthday.\nCollaborative working environment\nRemote or hybrid work options - remote working with possibility to work from our Varna office\nHealthcare insurance with dental service included\nFood vouchers ( €102.26 month per person)\nExplore our full range of benefits here: ZigZag Bulgaria Social Benefits.pdf\n\nIf you are interested, please send your CV in English.\n\nEquity, Inclusion & Transparency\nIn line with the EU Pay Transparency Directive, we are committed to transparency and will share the salary range for this role prior to the interview stage.\n\nA diverse and inclusive workplace where everyone feels a sense of belonging is a priority, and applications are welcomed from people of all backgrounds and experiences. Reflecting how we live our own values of meritocracy over hierarchy, even if not every requirement is met, interest in the role is encouraged.\nHiring focuses on people as well as skills-if this opportunity resonates, you’re encouraged to apply and bring your unique perspective.","description_format":"text","description_chars":10532,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Annual leave","Equity","Hybrid work"],"hiring_locations":[{"name":"Bulgaria","iso":"BG","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Logistics","Information Security","Supply Chain & Logistics Software"],"lifecycle":[{"event":"open","at":"2026-11-06T13:33:18Z"}],"visa":[],"liveness":{"score":95,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.946,"p_room":1,"age_days":1,"expected_fill_days":13,"reasons":["conf:2","urgency","win:early"],"computed_at":"2026-11-07T05:47:08Z"},"pay":null,"html_url":"https://alion.io/job/zigzag-global-cyber-security-manager","json_url":"https://alion.io/job/zigzag-global-cyber-security-manager.json","meta":{"generated_at":"2026-11-07T10:08:03Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8744,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":456211},"rest":"https://alion.io/mcp/rest/get_company?id=456211"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fzigzag-global-cyber-security-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fzigzag-global-cyber-security-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fzigzag-global-cyber-security-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/zigzag-global-cyber-security-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fzigzag-global-cyber-security-manager"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3868970}},{"tool":"search_jobs","arguments":{"company":"zigzag.global","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3868970},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}