Operational & Technical Testing Lead-IT

Vodafone; United Kingdom; On-site; GBP 70,000 - 90,000; Full time

Benefits offered by this job

Yearly bonus: 10%

Annual leave: 28 days + bank holidays

Charity days: 5 days/year

Maternity leave: 52 weeks

Private pension with matching contributions

Access to private medical and dental care

Additional discounts

Job summary

Vodafone is seeking a Senior Leader for IT security control testing, responsible for developing and executing a comprehensive testing strategy. The role demands collaboration across Technology, Operations, Risk, and Audit sectors, translating complex findings into clear insights and actions. If you have strong expertise in IT security, excellent analytical skills, and a collaborative mindset, this is an exceptional opportunity.

With a focus on leadership and improvement in control maturity, this position expects proactive engagement with stakeholders and the crafting of robust metrics to ensure security effectiveness.

Qualifications

• Strong practitioner knowledge of IT security controls.
• Proven experience in designing and executing security control testing.
• Ability to identify security gaps and translate findings into actionable guidance.
• Experience in defining, measuring and reporting IT security KPIs and KRIs.
• Strong collaboration with cross-functional teams.

Responsibilities

• Develop and own the IT security control testing strategy and methodology.
• Perform operational and technical control testing across IT systems.
• Identify and report security gaps and collaborate for closure.
• Enhance KRI reporting with accurate data-driven insights.
• Strengthen Vodafone’s IT systems & infrastructure security.

Skills

IT security controls

Control testing

Analytical judgement

Collaboration

Communication

Education

Relevant industry security certifications such as CISSP, CCSP, CISM

Job description

What you’ll do

A Senior Leader role responsible for defining and executing a risk‑based IT control testing programme to assess the design and operating effectiveness of technology controls across IT infrastructure, applications and cloud environments. The role provides end‑to‑end accountability for the testing methodology, rolling plan, standards & reporting and acts as the design owner for the testing approach and control test packs used across the in‑scope technology estate. As a Senior Leader the role leads and influences stakeholders across Technology, Operations, Risk and Audit—translating complex technical findings into clear risk insights, prioritised remediation actions and measurable improvements in control maturity. Applicants should bring deep hands‑on expertise in IT security and control testing, strong analytical judgement, and the leadership capability to set direction, coach others and drive consistent outcomes at scale.

• Develop and own the IT security control testing strategy, methodology and rolling out plan.
• Perform operational and technical control testing across IT systems and infrastructure.
• Identify and report security gaps and control deficiencies including actionable remediation recommendations and collaborate with cross‑functional teams to drive timely closure.
• Enhance KRI reporting by defining and delivering accurate data‑driven insights that reflect the health and maturity of IT security controls, including where KRIs currently do not exist.
• Strengthen Vodafone’s overall IT systems & infrastructure security through structured control testing, expert technical guidance and continuous improvement aligned to industry best practices.

Who you are

• Strong practitioner knowledge of IT security controls, with proven ability to apply and influence their adoption across complex, large‑scale IT and cloud environments.
• Proven experience in designing and executing security control testing including assessment of control design and effectiveness, supported by clearly defined metrics, KRIs and testing methodologies.
• Ability to identify security gaps and control deficiencies, translate findings into clear and actionable remediation guidance and work with stakeholders to drive timely closure.
• Experience in defining, measuring and reporting IT security KPIs and KRIs with the ability to provide accurate, data‑driven insights that demonstrate control health, effectiveness and maturity to senior stakeholders.
• Strong ability to collaborate with cross‑functional teams across technology, operations and risk functions, effectively communicating technical security topics to both technical and non‑technical audiences.
• Experience in IT control testing, audit or assurance roles.
• Relevant industry security certifications such as CISSP, CCSP, CISM, cloud or vendor‑specific are desired but not mandatory.

Not a perfect fit?

Worried that you don’t meet all the desired criteria exactly? At Vodafone we are passionate about empowering people and creating a workplace where everyone can thrive, whatever their personal or professional background. If you’re excited about this role but your experience doesn’t align exactly with every part of the job description, we encourage you to still apply as you may be the right candidate for this role or another opportunity.

What’s in it for you

• Yearly bonus: 10%
• Annual leave: 28 days + bank holidays + the opportunity to buy/sell/carry over 5 days/year
• Charity days: 5 days/year
• Maternity leave: 52 weeks (the first 13 weeks are fully paid, followed by 26 weeks of half pay)
• Private pension: You can contribute up to 5% of your basic pay with 2:1 matching from Vodafone up to 10%
• Access to: private medical, private dental, free health assessments, share save scheme
• Additional discounts: Vodafone retail, gym, cinema, cycle to work, season ticket loan