Director of Cybersecurity

Hi, we’re Back Market.

We’re here to help make tech reliable, affordable, and better than new. We're a global marketplace for refurbished devices, helping lower our collective environmental impact by providing trustworthy, affordable tech with 92% less carbon emissions than new.

Yep, you read that right. Turns out refurbished tech is way better for the planet than new. In fact, With every device purchased on Back Market, our positive impact on the planet grows. From our Customer Care representatives to our software engineer, every individual at Back Market cuts the planet — and consumers — a break.

Our mission is simple: to do more with what we already have.

Are you ready to join us?

Director of Cybersecurity & IT

To define and lead the next phase of our security and technology operations maturity. Reporting to the VP of Platform Engineering, you will be a strategic leader at the intersection of cybersecurity, IT, risk, compliance, and business growth.

To Know More About Our Engineering Teams

• A video of our VP Platform: https://youtu.be/zvTlw4BNNdc
• Our company purpose: http://bit.ly/3OsScpl
• Our engineering blog: https://bit.ly/3ASJNID

How We Work With The Existing Teams

The Director sets direction, creates clarity, secures resources, removes organizational obstacles, develops leaders, and ensures that the overall portfolio delivers against agreed outcomes. The functional managers and senior experts retain ownership of day‑to‑day execution, technical practices, operational processes, and delivery within their domains. The Director creates the conditions for those leaders to succeed and makes sure their work adds up to a coherent company‑wide strategy.

Your next missions

Set the strategy, roadmap, and investment priorities

• Define and evolve a multi-year Cybersecurity & IT strategy aligned with Back Market's business goals, risk appetite, technology strategy, and growth plans
• Translate that strategy into a focused portfolio of initiatives, with clear outcomes, sequencing, ownership, dependencies, and measures of success
• Own the operating rhythm for the full scope: planning, budgeting, program tracking, KPI and SLA reporting, risk reviews, and executive communication
• Make pragmatic investment and prioritization recommendations, balancing resilience, customer trust, regulatory expectations, employee experience, and engineering velocity
• Establish the governance forums and decision mechanisms needed to keep priorities clear and accountability visible

Lead and grow a high-performing leadership organization

• Lead through the managers and senior individual contributors responsible for Security Operations, Governance Risk & Compliance, IT Operations Engineering, IT Support, and relevant security engineering or product security capabilities
• Coach, challenge, and develop your leaders, helping them grow their scope, judgment, influence, and ability to build strong teams of their own
• Create clear career paths, succession plans, and development opportunities across the organization
• Build a high-trust environment where teams have genuine ownership, collaborate across boundaries, and are encouraged to improve how work gets done
• Attract and retain exceptional talent, define what great leadership and execution look like, and continuously raise the bar without creating unnecessary bureaucracy
• Ensure that responsibilities, decision rights, and interfaces between the teams are explicit, understood, and respected

Turn cybersecurity into a business enabler

• Act as a trusted advisor to the VP of Engineering, CTO, Executive Committee, and senior leaders across the business
• Explain complex security, IT, and risk topics in clear business language, including the trade‑offs, options, costs, and consequences of different decisions
• Engage with Heads of and cross‑functional streams across Back Market to advocate for security and resilience in all areas of the business
• Build alignment rather than relying on authority, and help teams adopt secure and resilient ways of working because they understand the rationale and value
• Partner with Finance and senior technology leadership on investment cases, budget stewardship, vendor strategy, and the value delivered by the portfolio

Steer enterprise cyber risk and trust

• Own the cyber risk management process at the strategic level, using the GRC framework as the foundation for security decisions and prioritization
• Ensure that material risks, control gaps, exceptions, and remediation plans are visible, understood, and actively managed
• Escalate critical risks when they exceed the organization's risk appetite or require executive arbitration