Director of Cybersecurity & IT

Stack

Responsibilities

• ▹Define and evolve a multi-year Cybersecurity & IT strategy aligned with business goals, risk appetite, technology strategy and growth plans
• ▹Translate that strategy into a focused portfolio of initiatives with clear outcomes, sequencing, ownership, dependencies and measures of success
• ▹Own the operating rhythm for the full scope: planning, budgeting, program tracking, KPI and SLA reporting, risk reviews and executive communication
• ▹Make pragmatic investment and prioritization recommendations, balancing resilience, customer trust, regulatory expectations, employee experience and engineering velocity
• ▹Lead through the managers and senior experts responsible for Security Operations, Governance Risk & Compliance, IT Operations Engineering, IT Support and security engineering capabilities
• ▹Coach, challenge and develop leaders; create career paths and succession plans
• ▹Build a high-trust environment and attract and retain exceptional talent
• ▹Turn cybersecurity into a business enabler: advise the VP of Engineering, CTO and Executive Committee, and explain complex security, IT and risk topics in clear business language
• ▹Own the cyber risk management process at the strategic level using the GRC framework, keeping material risks, control gaps and remediation plans visible and managed
• ▹Support compliance across ISO 27001, PCI DSS, GDPR, NIS2 and contractual partner requirements
• ▹Partner with the VP Legal and DPO on data privacy strategy
• ▹Represent Back Market's security maturity and risk posture to investors, auditors, regulators, partners and major customers
• ▹Serve as the senior escalation point for major or complex security incidents
• ▹Integrate security requirements into product and feature development from the beginning: secure SDLC, security-by-design, threat modeling, testing
• ▹Ensure the security roadmap addresses risks across cloud infrastructure, corporate systems, identity and access, endpoints, applications, data and third-party services
• ▹Set expectations for Security Operations across threat intelligence, vulnerability management, security monitoring, incident readiness, risk assessment, fraud support, AI security and SLA and KPI tracking
• ▹Ensure IT Operations and IT Support provide a reliable, scalable, high-quality experience across global offices and the remote workforce
• ▹Champion automation, standardization and engineering-led approaches
• ▹Foster a security-aware culture and sponsor awareness, education and Security Champion programs
• ▹Represent Back Market in security communities, industry groups and regulatory conversations; build trusted relationships with technology partners, auditors, insurers and external security providers

Requirements

• ▹A proven track record of building, scaling and developing organizations that span multiple security and/or IT domains
• ▹12 to 15+ years of experience across cybersecurity, information security, IT or related technology leadership roles, including at least 5 years leading managers and multi-team organizations
• ▹Experience as a strategic partner to a CTO, VP Engineering, executive committee or equivalent senior leadership group
• ▹Solid grasp of domains such as security operations, cyber risk and governance, compliance and assurance, security architecture, product security, cloud security, IT operations or corporate technology

Soft skills

About the company

Back Market is a global marketplace for refurbished devices, providing reliable, affordable tech with 92% less carbon emissions than new. Its mission is to do more with what we already have.