IT Policy & Controls Leader - Risk-Driven Security

Vodafone Group Plc; Greater London; On-site; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Yearly bonus 10%

28 days annual leave

Private pension

Job summary

Vodafone Group Plc in London is seeking an IT Policy and Controls Manager to shape and oversee the IT security controls framework. You will design methodologies, document processes, and set up governance to reduce risk in an agile, global environment.

The role requires 10+ years in IT security, knowledge of ISO 27001 and ITIL, and the ability to communicate complex concepts to senior stakeholders. You’ll work across Cyber Security, Privacy, and Corporate Security to improve controls and risk

Qualifications

• 10+ years of experience in complex IT environments.
• Hands-on with designing, implementing and operating IT security controls.
• Familiarity with ITIL and ISO 27001 processes.
• Excellent stakeholder and senior management communication skills.
• Certifications in security, risk, or compliance preferred.

Responsibilities

• Maintain and develop a fit-for-purpose IT control framework.
• Lead implementation and operation of governance activities across Vodafone groups.
• Collaborate with Cyber, Privacy and Corporate Security teams.
• Define KPIs/KRIs and support continuous improvement of controls.
• Support CHARM framework maintenance and risk reduction.

Skills

IT security risk management

Stakeholder management

Security controls design

Security frameworks knowledge

Communication excellence

Education

University degree in IT / related field

Tools

SAP

Cloud platforms

Operating systems

Databases

Job description

Vodafone Group Plc in London is seeking an IT Policy and Controls Manager to shape and oversee the IT security controls framework. You will design methodologies, document processes, and set up governance to reduce risk in an agile, global environment.

The role requires 10+ years in IT security, knowledge of ISO 27001 and ITIL, and the ability to communicate complex concepts to senior stakeholders. You’ll work across Cyber Security, Privacy, and Corporate Security to improve controls and risk