VodafoneThree- Customer Security Audit & Assurance Auth

What you’ll do

You’ll play an influential role within Vodafone Business Security Enhanced, working across Vodafone Business, Group Technology and Operations. As a trusted security subject matter expert, you’ll provide independent assurance around security controls, customer requirements and regulatory standards. You’ll have the opportunity to shape how security assurance is delivered, build strong relationships with stakeholders and customers, and make complex security requirements clear, practical and actionable.

• You’ll act as the Subject Matter Expert (SME) and Single Point of Contact (SPOC) for internal audits supporting certifications including ISO 27001, Cyber Essentials Plus and Defence Cyber Certification.
• You’ll coordinate, manage and deliver customer-facing information security audits, ensuring they’ll be planned effectively, completed on time and supported by clear, meaningful findings.
• You’ll manage Vodafone’s presence on Standardised Information Gathering platforms, helping customers access efficient alternative approaches to security assurance.
• You’ll independently assess proposed customer projects and solutions, identifying security impacts, requirements and risks and ensuring they’ll be clearly communicated.
• You’ll work collaboratively with stakeholders across Vodafone Business, Group Technology and Operations, influencing senior leaders and helping teams navigate security requirements with confidence.
• You’ll translate technical security risks, controls and issues into clear, accessible reporting for customers, internal stakeholders, senior management and C-level audiences.
• You’ll help ensure agreed remedial actions will be addressed appropriately and that accurate security inputs will be provided through relevant governance processes.
• You’ll create and maintain self-service security information, guidance and audit artefacts, making security knowledge easier to access while reducing repetitive support activity.

Who you are

• You’ll bring experience of delivering internal and external audits within telecommunications, managed cloud services or a managed services environment.
• You’ll have strong knowledge of information security policies, frameworks and regulatory programmes, including ISO 2700x, GDPR, NIST and COBIT, alongside a broad understanding of cyber security infrastructure and implementation.
• You’ll bring extensive knowledge of technical security controls across Network and IT environments, considering security across people, processes and technology.
• You’ll be able to apply sound judgement and undertake dynamic risk assessments within complex enterprise security architectures.
• You’ll communicate clearly and collaboratively, adapting technical security controls and concepts so they’ll be meaningful to different audiences.
• You’ll bring strong stakeholder management, prioritisation and influencing skills, enabling you to build trusted relationships with customers, colleagues and senior leadership.
• You’ll produce high-quality, accessible reports that will turn complex technical risks and issues into clear plain-English insight and recommendations for senior and C-level audiences.
• You’ll ideally hold an ISO 27001 Lead Auditor qualification or equivalent and/or ISACA Certified Information Systems Auditor (CISA) certification, and you’ll bring a strong understanding of
• Vodafone security policies and supporting documentation.

Location: You’ll be able to work location-independently, with travel to UK sites when required.

Worried that you don’t meet all the desired criteria exactly?
We know that everyone is unique, with multiple aspects to their identity and different experiences behind them. We are passionate about Inclusion for All and creating a workplace where everyone can thrive, whatever their personal or professional background. If you’re excited about this role but your experience doesn’t align exactly with every part of the job description, we encourage you to apply as you may be the right candidate for this role or another role, and our recruitment team can help you see how your skills fit in.

What we offer

We care about our people’s success by offering great pay, bonuses, up to 28 days off plus bank holidays, and paid time for charity work. You can personalise our benefits for you and your family, like discounts, vouchers, a pension plan and loads more. We help with your career through our amazing learning tools and top-notch parental leave policies.

Need to Know

We are regulated by the Financial Conduct Authority and all offers of employment for this role are subject to background checks, including criminal (DBS) and financial checks to meet the regulators standards.

If you require any reasonable adjustments or have an accessibility request as part of your recruitment journey, for example, extended time or breaks in between online assessments, a sign language interpreter, or assistive technology, please refer to the Accessibility section of our Careers website (https://careers.vodafone.com/uk/reasonable\-adjustments/) for guidance.

We use AI in different parts of our business to boost innovation, improve efficiency, and create new opportunities. We know many candidates use AI to fine-tune their CVs or prepare for interviews, but what we really care about is your unique experiences and achievements.

During the interview, we want you to rely on your own knowledge and skills to show us who you really are—your personality, creativity, and abilities. Above all, we’re looking for authenticity and can’t wait to get to know the real you.

#VodafoneThree
#LI-Hybrid