Senior Manager - Secure by Design - CIS - VOIS
Who we are
About this Role
What you’ll do
- Conduct Secure by Design assessments for products, services, and technology solutions.Perform architecture and technical security reviews to identify security risks and compliance gaps.Analyse solution esigns and provide practical recommendations to ensure alignment with Vodafone security policies, controls, and standards.
- Apply threat modelling methodologies to identify and mitigate security risks early in the development lifecycle.Review products and services against established security control frameworks and perform detailed ssessments.Collaborate with project teams to define security requirements based on business and technical needs.
- Partner with cybersecurity teams, technology functions, and business stakeholders to support secure solution delivery.
- Identify opportunities to enhance security controls and maintain compliance with organisational, legal, and regulatory requirements.
- Escalate security issues, concerns, and risks proactively to relevant stakeholders.
- Support security and risk management decision-making as a member of the Secure by Design leadership team.
- Manage stakeholder expectations and communications across Vodafone global entities.
- Drive process improvement initiatives and operational efficiency enhancements across assessment activities.
- Coordinate process setup activities and contribute to continuous optimisation of cybersecurity services.
- Prepare reports, dashboards, and presentations that accurately communicate assessment outcomes, risks, trends, and recommendations.
- Demonstrate exemplary conduct aligned with VOIS values and code of conduct.
Who you are
- 10 to 15 years of information security experience with strong expertise in security architecture and perimeter security.
- Strong knowledge of Firewall, VPN, Proxy, Network Engineering, and Network Management technologies.
- Practical experience conducting Secure by Design assessments and security architecture reviews.
- Knowledge of threat modelling methodologies and secure design principles.
- Experience in information security risk assessment, cyber risk management, and control evaluation.
- Good understanding of cloud security, data centre security, and application security.
- Strong knowledge of OWASP Security by Design principles and risk frameworks.
- Understanding of security controls and their role in organisational risk management.
- Experience working with industry standards and frameworks such as ISO 27001, ISO 22301, ISO 31000, NIST 800-53, and OWASP.
- Ability to analyse complex problems and develop innovative, practical solutions.
- Excellent communication, stakeholder management, influencing, and negotiation skills.
- Experience creating reports, presentations, and performance trend analysis.
- Ability to collaborate effectively with global teams and diverse stakeholders.
Preferred qualifications:
- Professional certifications such as CISA, CISM, ISO 27001 Lead Implementer/Auditor, ISO 31000, or related certifications.
- Knowledge of SAP security.Knowledge of Information Security Assurance frameworks including NIST SP 800-37 and COBIT.
- Understanding of Data Privacy, Information Protection, and GDPR requirements.
- Experience within the telecommunications industry.
- Knowledge of telecom networks, IP networks, IT infrastructure, applications, and associated security technologies.
- Knowledge of AWS, Microsoft Azure, and Google Cloud Platform security capabilities.
Not a perfect fit?
Concerned you may not meet every requirement? Vodafone is committed to creating an inclusive workplace where everyone can thrive. If you are excited about this role but your experience does not align exactly with every aspect of the job description, you are encouraged to apply. You may be the right candidate for this or another opportunity, and the recruitment team will support you in exploring where your skills fit best.
What's in it for you
- Opportunity to work within a global cybersecurity organisation supporting strategic Vodafone initiatives.
- Exposure to diverse security domains including cloud security, application security, infrastructure security, risk management, and security architecture.
- Opportunity to influence secure technology solutions across multiple markets and business functions.
- Collaboration with international stakeholders and cybersecurity experts across Vodafone Group.
- Participation in security transformation and process improvement initiatives.
- Opportunity to contribute to the growth and advancement of the Secure by Design
What skills you will learn
- Advanced Secure by Design assessment methodologies.
- Enterprise-scale cybersecurity architecture and governance practices.
- Global risk assessment, compliance, and security assurance frameworks.
- Security leadership and stakeholder engagement across multinational environments.
- Threat modelling techniques and secure solution design principles.
- Telecommunications and enterprise technology security practices.
- Cross-functional collaboration and cybersecurity consulting capabilities.
- Strategic decision-making within large-scale cybersecurity operations.
VOIS Equal Opportunity Employer Commitment
Join Us
Alert