IT Policy & Controls Leader — Security & Risk

Vodafone; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Yearly bonus 10%

28 days annual leave

Private pension with 2:1 match

Private medical & dental

Job summary

Vodafone seeks an IT Policy & Controls Manager to develop and govern our IT security controls framework, aligning risk management with corporate strategy. You will partner with Cyber Security, Privacy, and Audit to strengthen control effectiveness across markets.

You will lead the design, documentation and continuous improvement of the control framework, driving governance and measurable risk reduction in a global, dynamic environment.

Qualifications

• 10+ years of technical experience in complex IT environments.
• Familiarity with security risks and controls to mitigate these risks.
• Knowledge of ITIL and ISO 27001 processes and controls.
• Attention to detail and strong analytical skills.
• Excellent written and verbal communication abilities.
• Experience managing stakeholders up to senior management.
• Comfortable working in a global, diverse environment.

Responsibilities

• Develop and document the IT control framework and methodology.
• Update and enhance the control framework in line with strategies.
• Define criteria for control effectiveness and measurement.
• Establish governance clarifying ownership, scope, and dependencies.
• Collaborate with risk management, assurance and audit functions.
• Maintain CHARM framework and drive improvement initiatives.

Skills

IT security controls

Risk management

Stakeholder management

Strong communication

Analytical skills

Security frameworks

ITIL knowledge

ISO 27001

Complex IT environments

Self-starter

Team player

Education

University degree

Technology/business studies

ISO 27001 certification

Tools

SAP

Cloud

Databases

Operating systems

Job description

Vodafone seeks an IT Policy & Controls Manager to develop and govern our IT security controls framework, aligning risk management with corporate strategy. You will partner with Cyber Security, Privacy, and Audit to strengthen control effectiveness across markets.

You will lead the design, documentation and continuous improvement of the control framework, driving governance and measurable risk reduction in a global, dynamic environment.