Director of Cybersecurity & IT

The role

The Director of Cybersecurity & IT will define and lead the security and technology operations maturity. You will set strategy, manage risk, and lead a multi-disciplinary organization including security operations, governance, and IT support.

What you will do

• Define and evolve a multi-year Cybersecurity & IT strategy
• Translate strategy into a portfolio of initiatives with clear outcomes
• Own the operating rhythm including planning, budgeting, and KPI reporting
• Lead and grow a leadership organization of managers and senior contributors
• Coach and develop leaders and create career paths
• Act as a trusted advisor to the VP of Engineering, CTO, and Executive Committee
• Own the cyber risk management process at the strategic level
• Support security compliance efforts for ISO 27001, PCI DSS, GDPR, and NIS2
• Partner with Engineering and Product to integrate security requirements into development
• Ensure IT Operations and IT Support provide a reliable experience for global and remote workers

Required qualifications

• 12 to 15+ years of experience across cybersecurity, information security, IT, or related technology leadership roles
• At least 5 years leading managers and multi-team organizations
• Experience operating as a strategic partner to a CTO, VP Engineering, or executive committee
• Expertise in security operations, cyber risk and governance, compliance and assurance, security architecture, product security, cloud security, IT operations, or corporate technology
• Ability to turn business strategy and risk appetite into a practical security and IT roadmap
• Experience communicating security and technology risk to executive and non-technical audiences
• Strong understanding of modern cloud, SaaS, identity, endpoint, application, data, and infrastructure security concepts
• Experience with security-by-design and secure software development lifecycle practices
• Excellent written and verbal communication in English

Nice to have

• French is a plus
• A recognized certification such as CISSP, CISM, CISA, CRISC, CCSP, or an equivalent professional qualification
• Experience with ISO 27001, PCI DSS, GDPR, NIS2, or other relevant European regulatory and assurance frameworks
• Experience with GCP, Kubernetes, Terraform, modern cloud-native security tooling, or SaaS-first environments
• Experience in marketplace, e-commerce, fintech, or another business with meaningful customer, partner, or regulatory trust requirements
• Experience with AI security, fraud prevention, third-party risk, or software supply chain security
• Experience working in a fast-growing, international organization with distributed teams

Benefits

• Mission driven work environment
• Hybrid work environment
• Employee Resource Groups
• Mentorship programs
• Comprehensive accessibility policies
• Cultural competency training

Before you apply

• Phone call with Technical Talent Acquisition Partner
• Deep-dive interview on Leadership and management with VP of Engineering
• Meeting a peer Engineering Director and an Engineering Manager
• Technical interview with Cybersec and IT team
• Stakeholder interview with CTO and relevant leaders

About the company

Back Market is a global marketplace for refurbished devices that helps lower environmental impact. The company's mission is to do more with what we already have.