Cyber Security Manager

🔥 12 hours ago

🇧🇬 Bulgaria – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 11%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

ZigZag Global

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2015

📦 Logistics

📣 Marketing

💼 Consulting

Logistics • Marketing • Consulting

ZigZag Global is a returns-management platform and service provider for retailers that offers a white‑label returns portal, global carrier network, returns hubs (validation, grading, consolidation), and integrations (Shopify and other tech partners). The company provides SaaS tools and operational logistics to help retailers reduce returns costs, recover revenue through paid returns, live exchanges, refund-to-store-credit, and return-to-store options, while improving customer experience and sustainability reporting.

📋 Description

• Lead and strengthen security, privacy, and compliance across the SaaS platform, cloud infrastructure, and wider technology environment • Develop and deliver security and data protection strategies • Manage cyber and privacy risks and ensure compliance with GDPR and industry standards • Monitor, detect, investigate, and respond to cyber threats and security incidents • Lead investigations into suspicious activity, attempted intrusions, compromised accounts, and potential breaches • Identify and address security weaknesses through assessments, hardening, and technical controls • Lead incident response for ransomware, phishing, credential theft, unauthorised access, account takeover, malicious API activity, and cloud infrastructure compromise • Maintain incident response plans and playbooks, conduct root-cause analysis, and drive remediation • Lead vulnerability management activities and track remediation to completion • Implement and manage SIEM, EDR/XDR, cloud-native security monitoring, and other security capabilities • Analyse security logs, network activity, endpoint telemetry, and cloud events • Develop and maintain detection rules, alerting capabilities, and automated security controls • Secure applications, APIs, cloud infrastructure, and business systems with Engineering, DevOps, Infrastructure, and Product teams • Conduct proactive threat hunting • Manage external security providers, auditors, and incident response partners • Own and maintain the Information Security Management System (ISMS), risk register, policies, standards, procedures, and governance frameworks • Report security posture, risks, incidents, and improvement initiatives to senior stakeholders • Lead compliance with ISO 27001, SOC 2, Cyber Essentials Plus, GDPR, and other applicable requirements • Manage internal and external security, compliance, and data protection audits • Support customer security and privacy due diligence • Act as the appointed Data Protection Officer (DPO) • Oversee data protection governance, DPIAs, privacy risk management, data subject rights requests, privacy incidents, breach management, and regulatory reporting • Serve as the primary contact for regulators, customers, and internal stakeholders on privacy matters • Provide GDPR and privacy guidance • Develop and deliver security awareness and privacy training • Lead and mentor security specialists or analysts where applicable • Manage external security vendors and consultants • Drive continuous improvement across security capabilities and processes

🎯 Requirements

• Right to work in Bulgaria • Proven hands-on experience leading cyber security investigations, incident response activities, and risk-based decision-making during security incidents • Experience implementing and managing Identity & Access Management (IAM) controls, including authentication, authorisation, privileged access, and identity governance • Experience leading vulnerability management programmes, including risk assessment, remediation, and reporting • Strong understanding of security architecture principles and secure-by-design approaches across SaaS and cloud environments • Experience designing and maintaining network security controls, including segmentation, firewalls, and secure connectivity • Expertise in endpoint security, including EDR/XDR, device management, and threat protection • Hands-on experience with SIEM technologies, including log analysis, alert tuning, threat detection, and investigation • Experience embedding DevSecOps practices into software development and deployment lifecycles • Strong knowledge of application security, including secure coding, security testing, and secure SDLC practices • Strong understanding of common cyber threats, attack techniques, threat actors, and exploitation methods • Hands-on experience securing SaaS applications, APIs, authentication systems, and cloud environments, ideally within AWS, Azure, or GCP • Strong stakeholder management and collaboration skills across Engineering, Infrastructure, DevOps, Product, and business teams • CISSP, CISM, CCSP, ISO 27001 Lead Implementer or Lead Auditor, and data protection qualifications are desirable

🏖️ Benefits

• 20 days’ annual leave plus public holidays • Additional holiday entitlement for each completed year of service, up to six extra days • Extra day off on your birthday • Collaborative working environment • Remote or hybrid work options • Healthcare insurance with dental service included • Food vouchers (€102.26 per month per person) • Diverse and inclusive workplace • Applications welcomed from people of all backgrounds and experiences

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume