Cyber Security Manager

Sunterra RE is the largest producer of photovoltaic energy in Bulgaria, operating 3 solar  power plants across the country with more than 550 MW of installed generation capacity. 

The company is also developing over 1 GWh of battery energy storage systems (BESS). In addition, several wind energy projects are currently under development. 

Sunterra RE is currently looking for a Cyber Security Manager to support the secure growth  and resilience of the company’s operations and infrastructure. 

Role Purpose: 

• Lead the development, implementation, and management of the company’s  cybersecurity framework. 
• Ensure protection of information assets, business continuity, and compliance with  regulatory requirements and best practices (ISO 27001, NIS2, GDPR). 
  
  

Key Responsibilities: 

• Develop and implement cybersecurity strategy at company level. 
• Establish and maintain Information Security Management System (ISMS). • Define policies, procedures, and standards for security. 
• Manage cybersecurity risks and conduct vulnerability assessments and penetration  testing. 
• Monitor systems and respond to security incidents. 
• Ensure compliance with GDPR, NIS2, ISO 27001 and ISO 22301. 
• Coordinate with internal audit, IT, and legal teams. 
• Lead security awareness initiatives and trainings. 
• Develop and maintain Business Continuity (BCP) and Disaster Recovery (DRP) plans.
  
  

Requirements:

• Bachelor’s or Master’s degree in IT, Cybersecurity, Computer Science, or related field. • Minimum 5 years of experience in cybersecurity or information security. • At least 2–3 years in a leadership or coordination role. 
• Experience with ISMS and security frameworks. 
• Hands-on experience in incident response and risk management. • Knowledge of network security, IAM, EDR/XDR, cloud security (Azure/AWS is a plus). • Familiarity with ISO 27001, NIST, CIS Controls. 
• Understanding of GDPR and NIS2. 
• Professional certifications (CISSP, CISM, CISA, CEH) are an advantage. • Fluent in Bulgarian and good command of English. 
  
  

Personal Skills: 

• Strong analytical thinking and attention to detail. 
• Ability to work in a dynamic environment and manage priorities. • Decision-making under pressure. 
• Excellent communication and stakeholder management skills. 
• High level of integrity and confidentiality. 
  
  

What We Offer: 

• Key role with high impact on company security. 
• Competitive compensation and bonus scheme. 
• Opportunities for professional development and certifications. 
• Dynamic environment and participation in strategic projects. 
  
  

Key KPIs: 

• Reduction in number and severity of security incidents. 
• Incident response and recovery time (MTTR). 
• Compliance level with policies and regulations. 
• Successful audit results. 
• Improved employee security awareness.