Operational & Technical Testing Lead-IT

Vodafone; Newbury; On-site; GBP 120,000 - 180,000; Full time

Benefits offered by this job

Yearly bonus 10%

28 days annual leave + holidays + buy/

Private pension 5% with 2:1 match up

Private medical, dental, health checks

Share save scheme

Discounts Vodafone retail

Job summary

Vodafone is seeking a Senior Leader to define and execute a risk-based IT control testing programme across IT infrastructure, applications and cloud environments. You will own the testing methodology, rolling plan, standards and reporting, translating complex findings into clear risk insights and remediation actions.

You will lead stakeholders across Technology, Operations, Risk and Audit, driving structured testing and continual improvement of IT security controls to meet industry best

Qualifications

• Strong practitioner knowledge of IT security controls across large-scale IT and cloud environments.
• Experience designing and executing security control testing with metrics and testing methodologies.
• Ability to translate findings into actionable remediation guidance for senior stakeholders.
• Experience defining, measuring and reporting IT security KPIs and KRIs.
• Ability to communicate technical topics to both technical and non-technical audiences.

Responsibilities

• Develop and own the IT security control testing strategy, methodology and rolling-out plan.
• Perform operational and technical control testing across IT systems and infrastructure.
• Identify security gaps and control deficiencies with actionable remediation recommendations.
• Enhance KRI reporting with data-driven insights reflecting control health and maturity.
• Strengthen Vodafone’s IT security through structured testing and continuous improvement.

Skills

IT security controls

Security testing design

KRIs & KPIs reporting

Cross-functional collaboration

Stakeholder communication

Security certifications

Job description

What You’ll Do

A Senior Leader role responsible for defining and executing a risk‑based IT control testing programme to assess the design and operating effectiveness of technology controls across IT infrastructure, applications and cloud environments. The role provides end‑to‑end accountability for the testing methodology, rolling plan, standards and reporting, and acts as the design owner for the testing approach and control test packs used across the in‑scope technology estate. As a Senior Leader the role leads and influences stakeholders across Technology, Operations, Risk and Audit—translating complex technical findings into clear risk insights, prioritised remediation actions and measurable improvements in control maturity.

• Develop and own the IT security control testing strategy, methodology and rolling‑out plan.
• Perform operational and technical control testing across IT systems and infrastructure.
• Identify and report security gaps and control deficiencies, including actionable remediation recommendations, and collaborate with cross‑functional teams to drive timely closure.
• Enhance KRI reporting by defining and delivering accurate data‑driven insights that reflect the health and maturity of IT security controls, including areas where KRIs currently do not exist.
• Strengthen Vodafone’s overall IT systems & infrastructure security through structured control testing, expert technical guidance and continuous improvement aligned to industry best practices.

Who You Are

• Strong practitioner knowledge of IT security controls, with proven ability to apply and influence their adoption across complex, large‑scale IT and cloud environments.
• Proven experience in designing and executing security control testing, including assessment of control design and effectiveness, supported by clearly defined metrics, KRIs and testing methodologies.
• Ability to identify security gaps and control deficiencies, translate findings into clear and actionable remediation guidance and work with stakeholders to drive timely closure.
• Experience in defining, measuring and reporting IT security KPIs and KRIs with the ability to provide accurate, data‑driven insights that demonstrate control health, effectiveness and maturity to senior stakeholders.
• Strong ability to collaborate with cross‑functional teams across technology, operations and risk functions, effectively communicating technical security topics to both technical and non‑technical audiences.
• Experience in IT control testing, audit or assurance roles.
• Relevant industry security certifications such as CISSP, CCSP, CISM, or cloud/vendor‑specific are desired but not mandatory.

What's In It For You

• Yearly bonus: 10%
• Annual leave: 28 days + bank holidays + the opportunity to buy/sell/carry over 5 days/year
• Charity days: 5 days/year
• Maternity leave: 52 weeks (first 13 weeks fully paid, followed by 26 weeks of half pay)
• Private pension: contribute up to 5% of your basic pay with 2:1 matching from Vodafone up to 10%
• Access to private medical, private dental, free health assessments, share save scheme
• Additional discounts: Vodafone retail, gym, cinema, cycle to work, season ticket loan