Cyber Security Manager

About the Role

• Detect Attacks: Take a hands-on role in monitoring, detecting, investigating, and responding to cyber threats and security incidents affecting the organisation.
• Investigate Attacks: Investigate security alerts, suspicious activity, attempted intrusions, compromised accounts, and potential breaches.
• Prevent Attacks: Proactively identify and address security weaknesses through security assessments, hardening activities, and the implementation of appropriate technical controls.
• Respond to Breaches: Lead and coordinate the investigation and response to security incidents, including ransomware, phishing, credential theft, unauthorised access, account takeover, malicious API activity, and cloud infrastructure compromise. Maintain incident response plans and playbooks, conduct root-cause analysis, and drive remediation activities to strengthen security resilience.
• Manage Vulnerabilities: Lead vulnerability management activities, ensuring risks are identified, prioritised, remediated, and tracked to completion.
• Implement and manage security monitoring, detection, and response capabilities using technologies such as SIEM, EDR/XDR, cloud-native security monitoring, and other security tools.
• Analyse security logs, network activity, endpoint telemetry, and cloud events to identify indicators of compromise and potential attacks.
• Develop and maintain security detection rules, alerting capabilities, and automated security controls.
• Work closely with Engineering, DevOps, Infrastructure, and Product teams to secure applications, APIs, cloud infrastructure, and business systems.
• Conduct proactive threat hunting activities to identify suspicious behaviour, indicators of compromise, and emerging threats that may not trigger automated alerts.
• Manage relationships with external security providers, auditors, and incident response partners when specialist support is required.
• Improve Resilience: Ensure security incidents and assessments result in measurable improvements to controls, monitoring, and overall security resilience.

• Own and maintain the organisation's Information Security Management System (ISMS).
• Maintain the information security risk register and conduct organisation-wide security risk assessments.
• Develop and maintain security policies, standards, procedures, and governance frameworks.
• Report on security posture, risks, incidents, and improvement initiatives to senior stakeholders.
• Ensure security and privacy requirements are embedded into business projects, products, and technology initiatives.
• Drive continuous improvement of security governance, risk management, and compliance capabilities.
• Oversee supplier and third-party security assurance activities.

• Lead and maintain compliance with recognised standards and frameworks, including ISO 27001, SOC 2, Cyber Essentials Plus, GDPR, and other applicable regulatory requirements.
• Manage internal and external security, compliance, and data protection audits, ensuring ongoing audit readiness.
• Support customer security and privacy due diligence activities, including questionnaires, assessments, and audits.
• Assess security and data protection risks associated with third-party suppliers and service providers.
• Monitor emerging regulatory, security, and privacy requirements, ensuring policies, controls, and processes remain compliant and effective.
• Champion a culture of security and privacy by design, embedding security and privacy requirements throughout the organisation.

• Act as the organisation's appointed Data Protection Officer (DPO).
• Oversee data protection governance, privacy compliance, Data Protection Impact Assessments (DPIAs), and privacy risk management.
• Manage data subject rights requests, privacy incidents, breach management, and regulatory reporting obligations.
• Serve as the primary point of contact for regulators, customers, and internal stakeholders on data protection and privacy matters.
• Provide expert guidance on GDPR and wider privacy obligations across the business.

• Develop and deliver security awareness and privacy training programmes.
• Provide practical security guidance to technical and business teams.
• Promote a security-first culture across the organisation.

• Lead and mentor security specialists or analysts where applicable.
• Manage external security vendors and consultants.
• Drive continuous improvement across security capabilities and processes.

Essential Technical Experience

• Proven hands-on experience leading cyber security investigations, incident response activities, and risk-based decision-making during security incidents.
• Experience implementing and managing Identity & Access Management (IAM) controls, including authentication, authorisation, privileged access, and identity governance.
• Experience leading vulnerability management programmes, including risk assessment, remediation, and reporting.
• Strong understanding of security architecture principles and secure-by-design approaches across SaaS and cloud environments.
• Experience designing and maintaining network security controls, including segmentation, firewalls, and secure connectivity.
• Expertise in endpoint security, including EDR/XDR, device management, and threat protection.
• Hands-on experience with SIEM technologies, including log analysis, alert tuning, threat detection, and investigation.
• Experience embedding DevSecOps practices into software development and deployment lifecycles.
• Strong knowledge of application security, including secure coding, security testing, and secure SDLC practices.
• Strong understanding of common cyber threats, attack techniques, threat actors, and exploitation methods.
• Hands-on experience securing SaaS applications, APIs, authentication systems, and cloud environments, ideally within AWS, Azure, or GCP.
• Strong stakeholder management and collaboration skills, with the ability to work effectively across Engineering, Infrastructure, DevOps, Product, and business teams.

• CISSP
• CISM
• CCSP
• ISO 27001 Lead Implementer or Lead Auditor
• Data protection qualification such as CIPP/E, CIPM, BCS Practitioner Certificate in Data Protection (PC.dp), or equivalent.

What We Offer

• 20 days’ annual leave plus public holidays, with additional holiday entitlement awarded for each completed year of service (up to a maximum of six extra days). Plus, to celebrate you, enjoy an extra day off on your birthday.
• Collaborative working environment
• Remote or hybrid work options – remote working with possibility to work from our Varna office
• Healthcare insurance with dental service included
• Food vouchers ( €102.26 month per person)