Senior IT Security Controls Testing Leader

Vodafone; Newbury; On-site; GBP 120,000 - 180,000; Full time

Benefits offered by this job

Yearly bonus 10%

28 days annual leave + holidays + buy/

Private pension 5% with 2:1 match up

Private medical, dental, health checks

Share save scheme

Discounts Vodafone retail

Job summary

Vodafone is seeking a Senior Leader to define and execute a risk-based IT control testing programme across IT infrastructure, applications and cloud environments. You will own the testing methodology, rolling plan, standards and reporting, translating complex findings into clear risk insights and remediation actions.

You will lead stakeholders across Technology, Operations, Risk and Audit, driving structured testing and continual improvement of IT security controls to meet industry best

Qualifications

• Strong practitioner knowledge of IT security controls across large-scale IT and cloud environments.
• Experience designing and executing security control testing with metrics and testing methodologies.
• Ability to translate findings into actionable remediation guidance for senior stakeholders.
• Experience defining, measuring and reporting IT security KPIs and KRIs.
• Ability to communicate technical topics to both technical and non-technical audiences.

Responsibilities

• Develop and own the IT security control testing strategy, methodology and rolling-out plan.
• Perform operational and technical control testing across IT systems and infrastructure.
• Identify security gaps and control deficiencies with actionable remediation recommendations.
• Enhance KRI reporting with data-driven insights reflecting control health and maturity.
• Strengthen Vodafone’s IT security through structured testing and continuous improvement.

Skills

IT security controls

Security testing design

KRIs & KPIs reporting

Cross-functional collaboration

Stakeholder communication

Security certifications

Job description

Vodafone is seeking a Senior Leader to define and execute a risk-based IT control testing programme across IT infrastructure, applications and cloud environments. You will own the testing methodology, rolling plan, standards and reporting, translating complex findings into clear risk insights and remediation actions.

You will lead stakeholders across Technology, Operations, Risk and Audit, driving structured testing and continual improvement of IT security controls to meet industry best