Bulldogjob
For employers

About Back Market

We’re here to help make tech reliable, affordable, and better than new. We're a global marketplace for refurbished devices, helping lower our collective environmental impact by providing trustworthy, affordable tech with 92% less carbon emissions than new. Our mission is simple: to do more with what we already have.

The Role: Director of Cybersecurity & IT

Back Market is looking for a Director of Cybersecurity & IT to define and lead the next phase of our security and technology operations maturity. Reporting to the VP of Platform Engineering, you will be a strategic leader at the intersection of cybersecurity, IT, risk, compliance, and business growth. You will lead a multi-disciplinary organization through its existing functional managers, creating the clarity, operating rhythm, and investment focus needed to protect Back Market while enabling the company to move quickly. The scope includes cybersecurity strategy and risk management, security operations, governance and compliance, IT operations, IT support, and the corporate technology foundations that keep our people productive and our business resilient.

This is a director-level role, not a super-sized operational manager role. You will not be expected to personally own every process or make every technical decision. Your impact will come from setting direction, developing leaders, aligning stakeholders, making sound investment choices, and ensuring that the organization delivers measurable outcomes. You will be the senior voice who makes cybersecurity and IT understandable, actionable, and connected to the business.

Core Responsibilities

  • Strategy and Roadmap: Define and evolve a multi-year Cybersecurity & IT strategy aligned with business goals and risk appetite. Own the operating rhythm including planning, budgeting, and KPI/SLA reporting.
  • Leadership: Lead and grow a high-performing organization, coaching managers and senior experts in Security Operations, GRC, IT Operations, and IT Support.
  • Business Enablement: Act as a trusted advisor to the VP of Engineering, CTO, and Executive Committee. Explain complex risks in business language and advocate for security across the organization.
  • Risk and Compliance: Own the cyber risk management process, ensuring alignment with frameworks like ISO 27001, PCI DSS, GDPR, and NIS2. Represent the company's security posture to auditors and regulators.
  • Resilience and Product Security: Partner with Engineering and Product teams to integrate security-by-design and secure software development lifecycle practices. Ensure IT operations provide a reliable experience for the global workforce.
  • Culture: Foster a security-aware culture and represent Back Market in industry groups and with strategic partners.

At Back Market, we’re committed to hiring and supporting diverse teams of people from all backgrounds, experiences, and perspectives. You’ll enjoy impact-driven work with hands-on career development in an innovative, driven, and fast-paced environment, including:

  • A mission-driven work environment where your day-to-day makes an impact on the planet.
  • Hybrid work environment, with 2 remote days a week and 1 remote work week per quarter, plus 3 flex days.
  • Employee Resource Groups, including mentorship programs, comprehensive accessibility policies, and cultural competency training.

Required Qualifications

  • 12 to 15+ years of experience across cybersecurity, information security, IT, or related technology leadership roles, including at least 5 years leading managers and multi-team organizations.
  • Proven track record of building, scaling, and developing organizations that span multiple security and/or IT domains.
  • Experience operating as a strategic partner to a CTO, VP Engineering, executive committee, or equivalent senior leadership group.
  • Proven expertise in security operations, cyber risk and governance, compliance and assurance, security architecture, product security, cloud security, IT operations, or corporate technology.
  • Demonstrated ability to turn business strategy and risk appetite into a practical security and IT roadmap, investment plan, and operating model.
  • Experience communicating security and technology risk to executive, board-level, investor, partner, audit, and non-technical audiences.
  • A mature, risk-based approach to decision-making.
  • Strong understanding of modern cloud, SaaS, identity, endpoint, application, data, and infrastructure security concepts.
  • Excellent written and verbal communication in English. French is a plus.

Nice to have

  • Recognized certification such as CISSP, CISM, CISA, CRISC, CCSP, or equivalent.
  • Experience with ISO 27001, PCI DSS, GDPR, NIS2, or other relevant European regulatory and assurance frameworks.
  • Experience with GCP, Kubernetes, Terraform, modern cloud-native security tooling, or SaaS-first environments.
  • Experience in marketplace, e-commerce, fintech, or businesses with high trust requirements.
  • Experience with AI security, fraud prevention, third-party risk, or software supply chain security.
Back Market

Back Market

Job offers 5