VodafoneThree - Security Assurance Lead

VodafoneThree; Newbury; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Vodafone benefits

Bonus

Job summary

VodafoneThree is seeking a Security Governance professional to join our Corporate Security team. You will help manage governance, risk, and compliance activities, supporting audits, and shaping resilient controls across our UK network.

You’ll interact with stakeholders to maintain compliance, report on risk and control effectiveness, and drive improvements in response to evolving security demands. This role blends policy, technical awareness, and business acumen to protect VodafoneThree and its

Qualifications

• Governance, Risk and Compliance (GRC) tools to manage security activities.
• Strong background in risk management balancing business and security needs.
• Experience conducting or supporting security audits and testing activities.
• Actively pursuing recognised security qualifications (ISO 27001 / 27017 / 27018 etc).

Responsibilities

• Maintain a clear RACI for security control ownership and compliance.
• Produce and share security compliance KPIs with stakeholders.
• Support security audits and testing to demonstrate compliance.
• Analyze security risks, gaps, and remediation actions with owners.
• Track changes to frameworks or standards and communicate impact.
• Collaborate with teams to strengthen security controls against threats.

Skills

GRC tools

Risk management

Security audits

Compliance

Stakeholder mgmt

Job description

Location: Newbury + Hybrid
Salary: Excellent basic salary plus bonus and Vodafone benefits
Working Hours: Full time 37.5 hours per week – Monday to Friday

Hybrid

We believe that through collaboration and connection with our colleagues we can achieve great things. Our hybrid working approach allows our people to work both in the office and at home, providing the flexibility and resources you need to succeed in your role. We don't require you to be in on specific days; instead, we ask people to come into the office 2-3 days each week, for at least 8 days per month. You should work with your line manager to understand what their expectations are for you, your specific role and your team.

Who We Are

We’re here to build a network the UK can count on – one that connects people, places and potential. Because no matter where you live, what your background is, or how you get online – we think everyone deserves the same chance to stay connected, and with VodafoneThree, that future’s being built – today.
We’re creating more than the UK’s best network. We’re helping close the digital divide, empower communities and drive meaningful progress.
We believe that everyone should feel they belong. Whoever you are and whatever your story, there’s space for you here. We’re building a workplace where different perspectives are welcomed, voices are heard, and everyone feels safe to show up as themselves.
You’ll join a team that genuinely cares – about each other, about our customers, and about the future we’re building. From day one, you’ll be welcomed, valued and encouraged to bring your whole self to work.

Why VodafoneThree

Join us and you’ll be at the heart of change. That means building responsibly, investing sustainably and creating opportunities that last.
We’re not just expanding connectivity; we’re reimagining what a connected nation looks like. With £11bn invested in 5G and digital infrastructure, your work will directly power businesses, services, and communities across the country.
You’ll work on real challenges, with real impact, across every corner of the country. Wherever you join us, whatever your role, you’ll be helping to build a future that works better for everyone.
We move at pace, because what we’re building matters – and we’re learning as we go. We’re proud of the progress we’ve made, but we’re just getting started.
Join us at the heart of our business in Corporate, one of the central support functions that underpin our business and keep us moving forward. We provide centralised support, expertise and guidance across our UK and Group operations, continuing to build on our success and trailblazing the way to our next stage of digital growth.

What You’ll Do

Work closely with teams across the business to build strong relationships and make sure everyone is accountable for security controls. This helps us meet regulatory and certification requirements, while keeping Vodafone and our customers safe from threats that could impact the security or reliability of our services.

• Help support both internal and external security audits and testing, making sure we’re meeting customer expectations and legal security requirements.
• Clearly report on how our security controls are performing based on audit and testing results.
• Keep track of remediation activity and follow up with control owners to ensure security issues are addressed.
• Analyse security risks so gaps are properly recorded, owned, and actively managed.
• Assess the impact of changes to customer security frameworks, legal requirements, or industry standards.
• Respond to internal questions and requests related to security assurance.
• Encourage teams to adopt security best practices and continuously improve our overall security posture.
• Work with teams to strengthen security controls as new threats emerge and evolve.
• Build and maintain strong working relationships with internal stakeholders

Who You Are

• Comfortable using Governance, Risk and Compliance (GRC) tools to manage and track security activities
• Strong background in risk management, balancing business priorities with security requirements
• Experience conducting or supporting security audits and testing activities
• Actively working towards (or keen to achieve) a recognised security qualification such as ISO 27001 / 42001 / 27017 / 27701 auditor, CISM, CISSP, COBIT, CISA, CGEIT, or an equivalent

Responsibilities & delivery

• Maintain a clear RACI for security control ownership, helping hold stakeholders accountable for compliance
• Produce and share security compliance KPIs and KRIs with key stakeholders to drive visibility and action
• Make sure security certifications stay up to date and that external security milestones and deadlines are met
• Support or carry out security audits and testing to demonstrate compliance with mandatory security controls

Worried that you don’t meet all the desired criteria exactly? We know that everyone is unique, with multiple aspects to their identity and different experiences behind them. We are passionate about Inclusion for All and creating a workplace where everyone can thrive, whatever their personal or professional background. If you’re excited about this role but your experience doesn’t align exactly with every part of the job description, we encourage you to apply as you may be the right candidate for this role or another role, and our recruitment team can help you see how your skills fit in. We believe that everyone has valuable contributions to make. As a Disability Confident Employer, we actively encourage individuals with disabilities to apply for positions within our team. Through the ‘Offer an Interview’ scheme, we aim to offer interviews to a fair and proportionate number of applicants with disabilities who best meet the essential criteria for our vacancies. If you would like to participate in the scheme, you will have the opportunity to indicate this on your application.

What We Offer

We care about our people’s success by offering great pay, bonuses, up to 28 days off plus bank holidays, and paid time for charity work. You can personalise our benefits for you and your family, like discounts, vouchers, a pension plan and loads more. We help with your career through our amazing learning tools and top-notch parental leave policies.

Need to Know

We are regulated by the Financial Conduct Authority and all offers of employment for this role are subject to background checks, including criminal (DBS) and financial checks to meet the regulators standards. If you require any reasonable adjustments or have an accessibility request as part of your recruitment journey, for example, extended time or breaks in between online assessments, a sign language interpreter, or assistive technology, please refer to the Accessibility section of our Careers website (https://careers.vodafone.com/uk/reasonable-adjustments/) for guidance. We use AI in different parts of our business to boost innovation, improve efficiency, and create new opportunities. We know many candidates use AI to fine-tune their CVs or prepare for interviews, but what we really care about is your unique experiences and achievements. During the interview, we want you to rely on your own knowledge and skills to show us who you really are—your personality, creativity, and achievements. Above all, we’re looking for authenticity and can’t wait to get to know the real you.

#VodafoneThree