Cyber Security Manager

This is a fully remote position, open to applicants in Bulgaria.

📋 Description

• Lead and enhance security, privacy, and compliance across the SaaS platform, cloud infrastructure, and broader technology ecosystem.

• Create and implement security and data protection strategies.

• Oversee cyber and privacy risks while ensuring compliance with GDPR and relevant industry standards.

• Monitor, detect, investigate, and respond to cyber threats and security incidents.

• Conduct investigations into suspicious activities, attempted breaches, compromised accounts, and potential security incidents.

• Identify and rectify security vulnerabilities through assessments, hardening, and technical controls.

• Direct incident response efforts for ransomware, phishing, credential theft, unauthorized access, account takeovers, malicious API activities, and cloud infrastructure compromises.

• Maintain incident response plans and playbooks, perform root-cause analyses, and drive remediation efforts.

• Lead vulnerability management initiatives and ensure remediation is tracked to completion.

• Implement and manage SIEM, EDR/XDR, cloud-native security monitoring, and other security functionalities.

• Analyze security logs, network activities, endpoint telemetry, and cloud events.

• Develop and sustain detection rules, alerting functionalities, and automated security controls.

• Secure applications, APIs, cloud infrastructure, and business systems in collaboration with Engineering, DevOps, Infrastructure, and Product teams.

• Engage in proactive threat hunting activities.

• Manage relationships with external security providers, auditors, and incident response partners.

• Own and maintain the Information Security Management System (ISMS), risk register, policies, standards, procedures, and governance frameworks.

• Report on security posture, risks, incidents, and improvement initiatives to senior stakeholders.

• Lead compliance efforts with ISO 27001, SOC 2, Cyber Essentials Plus, GDPR, and other relevant requirements.

• Oversee internal and external security, compliance, and data protection audits.

• Assist with customer security and privacy due diligence.

• Serve as the appointed Data Protection Officer (DPO).

• Supervise data protection governance, DPIAs, privacy risk management, data subject rights requests, privacy incidents, breach management, and regulatory reporting.

• Act as the primary liaison for regulators, customers, and internal stakeholders on privacy-related issues.

• Provide guidance on GDPR and privacy matters.

• Develop and deliver training on security awareness and privacy.

• Lead and mentor security specialists or analysts as applicable.

• Manage external security vendors and consultants.

• Propel continuous improvement across security capabilities and processes.

⛳️ Requirements

• Eligibility to work in Bulgaria.

• Demonstrated hands-on experience in leading cyber security investigations, incident response activities, and risk-based decision-making during security incidents.

• Experience in implementing and managing Identity & Access Management (IAM) controls, including authentication, authorization, privileged access, and identity governance.

• Proven track record in leading vulnerability management programs, including risk assessment, remediation, and reporting.

• Strong understanding of security architecture principles and secure-by-design methodologies across SaaS and cloud environments.

• Experience in designing and maintaining network security controls, including segmentation, firewalls, and secure connectivity.

• Expertise in endpoint security, encompassing EDR/XDR, device management, and threat protection.

• Practical experience with SIEM technologies, including log analysis, alert tuning, threat detection, and investigations.

• Experience in integrating DevSecOps practices into software development and deployment lifecycles.

• Strong knowledge of application security, including secure coding, security testing, and secure SDLC practices.

• Comprehensive understanding of common cyber threats, attack techniques, threat actors, and exploitation methods.

• Hands-on experience securing SaaS applications, APIs, authentication systems, and cloud environments, especially within AWS, Azure, or GCP.

• Strong stakeholder management and collaboration skills across Engineering, Infrastructure, DevOps, Product, and business teams.

• Certifications such as CISSP, CISM, CCSP, ISO 27001 Lead Implementer or Lead Auditor, and data protection qualifications are preferred.

🏝️ Benefits

• 20 days of annual leave plus public holidays.

• Additional holiday entitlement for each completed year of service, up to six extra days.

• An extra day off on your birthday.

• A collaborative working environment.

• Options for remote or hybrid work.

• Healthcare insurance with dental services included.

• Food vouchers (€102.26 per month per person).

• A diverse and inclusive workplace.

• Applications are encouraged from individuals of all backgrounds and experiences.