Senior Manager_Secure By Supplier_Pune

About VOIS:

VOIS (Vodafone Intelligent Solutions) is a strategic arm of Vodafone Group Plc, creating value and enhancing quality and efficiency across 28 countries, and operating from 7 locations: Albania, Egypt, Hungary, India, Romania, Spain and the UK.

Over 29,000 highly skilled individuals are dedicated to being Vodafone Group’s partner of choice for talent, technology, and transformation. We deliver the best services across IT, Business Intelligence Services, Customer Operations, Business Operations, HR, Finance, Supply Chain, HR Operations, and many more.

Established in 2006, VOIS has evolved into a global, multi-functional organisation, a Centre of Excellence for Intelligent Solutions focused on adding value and delivering business outcomes for Vodafone.

About VOIS India:

In 2009, VOIS started operating in India and now has established global delivery centres in Pune, Bangalore and Ahmedabad. With more than 14,500 employees, VOIS India supports global markets and group functions of Vodafone, and delivers best-in-class customer experience through multi-functional services in the areas of Information Technology, Networks, Business Intelligence and Analytics, Digital Business Solutions (Robotics & AI), Commercial Operations (Consumer & Business), Intelligent Operations, Finance Operations, Supply Chain Operations and HR Operations and more.

Job Role:

 Key responsibilities include:

• Performing pre sales technical assessments of a supplier’s security posture and compliance to UK regulatory requirements during supplier sourcing and contracting.
• Measuring the security & compliance risk, documenting all findings and provision of a security recommendation into the sourcing decision
• Engaging with external suppliers to clarify, understand & influence their regulatory compliance and general security position.
• Management of multiple stakeholders and functional subject matter experts in order to verify a security position and drive effective decision outcomes
• Being the technical subject matter expert in the communication of security risks when liaising with the business, technology and third-party vendors.
• Identifying required contractual provisions to mitigate and minimize the risk to Vodafone and support Supplier Cyber Security in their negotiation of contractual security requirements.

Key accountabilities and decision ownership

• Evaluate pre-sales security & compliance risks based on a standardized assessment approach and ensure that all potential risks and mitigations have been identified
• Provide a security recommendation as part of the security evaluation within the sourcing decision and support internal stakeholders to help them understand the security & compliance risks a supplier may bring
• Provide support to supplier contract negotiations with expert guidance on the technical security & compliance risks and how these can be minimised or mitigated.
• Operation and development of relevant processes, tools and reports
• Provide advice and guidance to Vodafone colleagues and external suppliers on security and compliance related matters. Define, communicate and ensure that suppliers and third parties understand and comply with Vodafone’s security standards.
• Drive a change in perception that security is an inhibiter, and work to demonstrate that security can be a business differentiator.

Core competencies, knowledge and experience

• Experience of pre-sales environment, identifying and assessing risk through evaluation of responses in order to determine a security recommendation
• Ability to deal with complexity, collaborate effectively and communicate security requirements and risks to all levels of the business. The experience to explain complex technical matters to non-technical business executives is crucial.
• Experienced in managing stakeholders at different levels of the organization.
• Strong professional experience in information technology, Cyber security with a good level of technical depth, ideally gained in a similar role
• Good knowledge/experience in securing of cloud environments and web services, container security, connectivity, user access management, networks and penetration testing experience beneficial.
• Good knowledge/understanding of security governance within the delivery types such as Software as a Service, Platform as a Service and Infrastructure as a Service and working alongside the vendor solutions as well.

Must have technical / professional qualifications:

• Expertise in fixed, mobile networks and networking generally.
• University degree in Information Security or equivalent
• One or more of the following: CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor, GIAC, TOGAF, SABSA or equivalent
• 5+ years work experience in the field of cyber security and overall 10+ years of experience

VOIS Equal Opportunity Employer Commitment