Join VOIS as a Cyber Security Application Risk & Assessment Consultant based in Pune, India. In this full-time role, you will evaluate security risks, conduct security design and technical assessments of live applications, and ensure secure-by-design principles are applied across enterprise services.
Requirements
6+ years of experience in cyber security, information security, or a related technology risk role.
University degree in Information Security or an equivalent discipline.
Professional certification such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor, GIAC, TOGAF, or SABSA.
Practical experience with frameworks like ISO 27001, NIST 800-53, and OWASP, and cloud platforms like AWS and GCP.
Skills & Responsibilities
Cyber Security Risk Assessment: Conduct application assessments and technical security reviews to identify and mitigate cyber risks.
Risk Management: Create, maintain, and manage risks within the Risk Register, driving remediation activities to closure.
Security Architecture: Provide security design, architecture guidance, and consultancy to business and technology teams.
Stakeholder Engagement: Engage with internal stakeholders and external vendors to assess and improve security controls.
Potential transition routes: People from Information Security Analyst or Risk Manager roles may bring relevant risk assessment and compliance skills, alongside meeting the required technical background.
Job description
Who we are
VOIS (Vodafone Intelligent Solutions) is a strategic arm of Vodafone Group Plc, creating value for customers by delivering intelligent solutions through Talent, Technology & Transformation. As the largest shared services organisation in the global telco industry with 30,000 FTE, our portfolio of next-generation solutions and services are designed in partnership with customers across Vodafone Group, local markets, and partner markets to simplify and drive growth. With our strategic partner Accenture, we work alongside our Vodafone customers, other Telco and tech companies to drive transformation, meet the challenges of our industry and ensure we stay relevant and resilient. This partnership is a unique, industry-first model which brings together the best of in-house and 3rd party capability. We work with customers across 28 countries from 10 VOIS locations: Albania, Egypt, Hungary, India, Romania, Spain, Turkey, UK, Germany, Ireland, and with a network of teams in Czech Republic, Italy, Greece, and Portugal. #VOIS #BeUnrivalled #CreateTheFuture
About this Role
We are seeking a Cyber Security Application Risk & Assessment Consultant to join our Cybersecurity team and support the secure operation of Vodafone products and services throughout their lifecycle. This role focuses on evaluating security risks, conducting security design and technical assessments of live applications and services, and ensuring that secure-by-design principles are consistently applied. The successful candidate will collaborate with business, technology and third-party stakeholders to identify, assess and manage cyber security risks while providing trusted security consultancy and architecture guidance.
What you’ll do
Conduct Application In-Life Assessments across live products, applications and services.
Perform security design reviews and technical security assessments to identify cyber security risks.
Ensure a consistent and standardised assessment approach is followed to capture risks and recommend appropriate mitigation actions.
Create, maintain and manage risks within the Risk Register.
Drive risk remediation activities to closure and facilitate risk acceptance where remediation is not achievable.
Provide cyber security expertise and recommendations to support security and risk management decisions.
Offer security design, architecture guidance and cyber security consultancy to business and technology teams.
Engage with internal stakeholders and external vendors to assess and improve security controls.
Identify recurring risk themes and contribute to process improvements that strengthen organisational cyber resilience.
Support reporting, communications and engagement activities for cyber security leadership and stakeholders.
Promote best practices across network security, cloud security, application security and risk management disciplines.
Who you are
You have 6+ years of experience in cyber security, information security or a related technology risk role.
You possess strong technical knowledge and practical experience in cyber security risk assessment and assurance activities.
You have experience working with recognised standards and frameworks such as ISO 27001, ISO 22301, ISO 31000, NIST 800-53 and OWASP.
You understand technology risk management disciplines, including network security, cloud security, application security and enterprise risk management.
You have experience securing cloud-based environments, particularly Amazon Web Services (AWS) and Google Cloud Platform (GCP).
You are familiar with web services, container security and connectivity security concepts.
You can effectively communicate complex technical concepts and risks to both technical and non-technical audiences.
You have strong stakeholder management, collaboration and influencing skills.
You can identify, assess, document and manage cyber security risks in complex environments.
You hold a university degree in Information Security or an equivalent discipline.
Essential Qualifications
CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor, GIAC, TOGAF, SABSA or equivalent certification.
Desirable Experience
Knowledge of Information Security Assurance frameworks such as NIST SP 800-37 and COBIT 5.
Knowledge of Data Privacy, Information Protection and GDPR.
Experience within the telecommunications industry.
PMP or PRINCE2 Practitioner certification.
ITIL, Scrum or Lean Six Sigma certification.
Not a perfect fit?
Concerned you may not meet every requirement? Vodafone is committed to creating an inclusive workplace where everyone can thrive. If you are excited about this role but your experience does not align exactly with every aspect of the job description, you are encouraged to apply. You may be the right candidate for this or another opportunity, and the recruitment team will support you in exploring where your skills fit best.
What's in it for you
Opportunity to work on large-scale global cyber security programmes and live enterprise services.
Exposure to diverse technologies, cloud platforms and business environments.
Collaboration with cross-functional teams including business, technology and external partners.
Opportunity to influence security strategy, risk reduction initiatives and secure-by-design practices.
A role that combines security consulting, risk management and technical assessment expertise.
Continuous professional growth within a global technology and telecommunications environment.
Cyber security architecture review and advisory capabilities.
Enterprise risk management and risk governance practices.
Cloud security assessment across AWS and GCP environments.
Security control design and effectiveness evaluation.
Stakeholder engagement and executive-level cyber security communication.
Regulatory, compliance and assurance framework application.
Security risk remediation planning and tracking.
VOIS Equal Opportunity Employer Commitment
Vodafone recognises and celebrates the value of diversity in building a workforce that reflects the customers and communities it serves. No form of discrimination is tolerated. This includes, but is not limited to, discrimination based on race, colour, age, veteran status, gender identity, gender expression, sexual orientation, pregnancy, maternity or parental status, ethnicity, disability, religion or belief, political affiliation, trade union membership, nationality, citizenship, indigenous status, medical condition, HIV status, neurodiversity, social origin, cultural background, marital or civil partnership status, or socio-economic background.
Join Us
At Vodafone, we’re working hard to build a better future. A more connected, inclusive and sustainable world. As a dynamic global community, it's our human spirit, together with technology, that empowers us to achieve this. We challenge and innovate in order to connect people, businesses, and communities across the world. Delighting our customers and earning their loyalty drive us, and we experiment, learn fast and get it done, together. With us, you can truly be yourself and belong, share inspiration, embrace new opportunities, thrive, and make a real difference.
Alert
Apply for Vodafone jobs only through the official Vodafone Careers website to avoid job scams and fraud. #JDEnhancedByTARA
