Information Security Analyst

Job Title: Information Security Analyst

Type of employment: Permanent, Full time

Location: Remote from Portugal - you must be resident in Portugal in order to be considered. 

About ZigZag Global  

  
We are Returns! We’re an award-winning eCommerce returns business founded in 2015 by our CEO, Al Gerrie. We live to push boundaries of smarter returns and we want a thriving retail world where every customer experience is both delightful and considered, everything we buy can be loved and re-loved and preserving our planet is part of the fabric of how we shop.   

Today, more than 200 companies across 130 countries use our SaaS platform to help reduce the cost, friction, and impact of returns. Part of our leading Enterprise retail clients are Inditex (Zara, Bershka, Pull&Bear, etc.), Superdry, Sports Direct, The Hut Group, Swarovski, not to forget the Whitelabel partnership with the world’s biggest logistics businesses like DHL, Evri, SkyNet and FedEx.  

In March 2021, ZigZag was acquired by Global Blue, an industry leader in tax free shopping. Strengthening our reach across the global retail industry and allowing us to continue to do what we do best, help retailers manage and re-sell their returns.   

At ZigZag, we embody a set of values that lies at the core of our workplace culture. Our dedication to the Start-up Spirit, Human Heart and Grown-up Mindset defines our collaborative spirit and shapes our collective success. 

Person’s profile 

We are in search of a Information Security Analyst who resonates with our Purpose, Vision, and Values and is eager to contribute to a team where these principles are more than words – they guide our actions. Your commitment to fostering positive relationships, whether with colleagues or customers, will help create an environment where everyone feels appreciated and valued. 

As the inaugural Information Security Analyst at ZigZag, you will be instrumental in defining, implementing, and managing our cybersecurity strategy. We are looking for a self-starter with a proven track record of setting up cybersecurity frameworks and protocols within a SaaS environment. Working closely with cross-functional teams, you will identify and mitigate potential security risks, ensuring the confidentiality, integrity, and availability of our systems and data.

Responsibilities:

1.    Cybersecurity Strategy Development:

·       With the CTO develop and implement a comprehensive cybersecurity strategy tailored to the unique needs of our SaaS business.

·       Establish and enforce security policies, standards, and procedures.

2.    Security Infrastructure Setup:

·       Make recommendations to enhance our security infrastructure, including firewalls, intrusion detection/prevention systems, and endpoint protection/management.

·       Configure and maintain security tools and technologies.

·       Make recommendations to product for security enhancements to our platform

3.    Incident Response and Threat Management:

·       Develop and maintain an incident response plan for cybersecurity events.

·       Manage our program of regular security assessments and vulnerability scans.

·       Maintain a risk register of active issues and resolution plans

4.    User Training and Awareness:

·       Develop and deliver cybersecurity training programs for employees to enhance awareness and adherence to security best practices.

·       Monitor and enforce user compliance with security policies.

5.    Compliance and Regulation:

·       Stay abreast of cybersecurity regulations and industry best practices.

·       Ensure the organization's compliance with relevant cybersecurity standards.