Secure By Design IT & Digital Specialist

Job Description

Location: Newbury + *Hybrid
Working hours: Full time 37.5 hours per week – Mon to Fri
Salary: Excellent basic salary plus bonus and Vodafone benefits

*Hybrid

At Vodafone UK we believe that through collaboration and connection with our colleagues we can achieve great things. Our hybrid working approach allows our people to work both in the office and at home, providing the flexibility and resources you need to succeed in your role. We don't require you to be in on specific days; instead, we ask people to come into the office 2-3 days each week, on average 8 days a month. Our “Office in a Box” home working kit will provide you with everything you need, no matter where you are.

At Vodafone UK, diversity isn’t just a buzzword, it is core to who we are as a company. We’re proud to be certified as a Great Place to Work and are committed to driving inclusion for all; creating a workplace that is fully representative of the communities and customers we serve.

What you’ll do

Working directly with the Secure by Design Managers, you will be responsible for all Cyber Security Consulting and Assessment activities including ensuring security design requirements have been met, defects identified through security testing have been mitigated and any deviation from policy have been accurately captured through the risk management process.

The projects and “business as usual” changes you will be working on will encompass the full range of IT & Digital technologies encompassing:

• Online & Digital including Mobile Applications
• Customer Management & Billing Systems
• Business Intelligence and Big Data
• Business Support Systems
• Cloud Infrastructure & SaaS
• Automation Solutions
• End user computing / BYOD.

Main responsibilities:

• Ensure project designs comply with Baseline Security Requirements and security policy
• Ensure that projects integrate with security baseline controls such as IPS/IDS, WAF, Firewall Change Management, Identity & Access Management, SIEM and Vulnerability Management
• Ensure internal customers, external suppliers and delivery partners are aware of security standards and future strategy to influence development roadmaps
• Identify security risks, manage them with key stakeholders, and provide recommendations for risk mitigation
• Build relationships with your stakeholder community across the Vodafone business
• Escalate deviations from baseline security requirements and security architecture
• Approves designs that comply with policies and standards and are within parameters set by the Secure by Design Managers
• Escalates designs which deviate from policies, standards and parameters set by the Secure by Design Managers
• Provide support for scheduling and completion of pre-requisites for Penetration testing to both Secure by design engaged project assessments and other Secure by Design team members.,
• Manage user administration of Penetration testers and act as first point of contact in the creation or support of tester accounts.
• Embed effective security practices into IT & Digital processes (Agile, DevSecOps, CI/CD etc);
• Provide Cyber Security guidance, design input and design review/assessment.
• Review and approve end to end connectivity across Vodafone networks.
• Specify security testing and ensure that identified vulnerabilities are remediated.
• Identify Cyber Security risks and ensure that these are managed effectively
• Coordinate and support project related Pen Tests as the Secure by Design SPOC.

Who you are

• Competent in understanding IT and network designs and equipment configurations used to deliver a wide range of IT and telecommunications solutions
• Competent in applying security policies and principles defined in security architecture to real world scenarios
• Understands and applies risk management principles
• Effective communication skills to influence stakeholders and explain complex security requirements in simple terms

Worried that you don’t meet all the desired criteria exactly? At Vodafone we are passionate about Inclusion for All and creating a workplace where everyone can thrive, whatever their personal or professional background. If you’re excited about this role but your experience doesn’t align exactly with every part of the job description, we encourage you to apply as you may be the right candidate for this role or another role, and our recruitment team can help you see how your skills fit in.

What we offer

We believe that taking care of our employees is the key to their success. That is why we offer an excellent remuneration and bonus package with up to 28 days holiday entitlement, in addition to bank holidays and paid leave for charity projects. We offer an extensive benefits package that can be tailored to suit you and your family, including employee discounts, retail vouchers, pension plan and share schemes. We take pride in our commitment to supporting you at every stage of your career by providing top of the range learning and development tools, market leading parental leave policies and an innovative Reconnect programme for people who have taken a career break.

Together we can

Vodafone UK are regulated by the Financial Conduct Authority and all offers of employment for this role are subject to background checks, including criminal (DBS) and financial checks to meet the regulators standards.
If you require any reasonable adjustments or have an accessibility request as part of your recruitment journey, for example, extended time or breaks in between online assessments, a sign language interpreter, or assistive technology, please refer to the Accessibility section of our Careers website (https://careers.vodafone.com/uk/applying-to-vodafone/) for guidance.