VodafoneThree - Security Assurance Lead

Vodafone Limited; Newbury; On-site; GBP 52,000 - 76,000; Full time

Job summary

Vodafone Limited in Newbury seeks a Security Assurance professional focused on governance, risk, and compliance to strengthen security controls across the business. You will support audits, track remediation, and report on control performance to ensure customer expectations and legal requirements are met.

The role requires experience with risk management, security testing, and a proactive approach to improving security posture.

Qualifications

• Experience supporting security audits and testing activities.
• Strong background in risk management, balancing business priorities with security requirements.
• Familiarity with Governance, Risk and Compliance (GRC) tools.

Responsibilities

• Support internal and external security audits and testing to demonstrate compliance with mandatory controls.
• Report on security controls performance based on audit and testing results.
• Maintain remediation activity tracking with control owners to close gaps.
• Analyse security risks and ensure gaps are recorded, owned and managed.
• Encourage teams to adopt security best practices and improve overall security posture.
• Maintain RACI for security control ownership and report KPIs/KRIs to stakeholders.

Skills

Security governance

Security audits

Risk management

GRC tools

ISO 27001

CISM

CISSP

COBIT

CISA

Job description

Working Hours: Full time 37.5 hours per week - Monday to Friday Work closely with teams across the business to build strong relationships and make sure everyone is accountable for security controls. Help support both internal and external security audits and testing, making sure we\'re meeting customer expectations and legal security requirements. Clearly report on how our security controls are performing based on audit and testing results. Keep track of remediation activity and follow up with control owners to ensure security issues are addressed. Analyse security risks so gaps are properly recorded, owned, and actively managed. Assess the impact of changes to customer security frameworks, legal requirements, or industry standards. Respond to internal questions and requests related to security assurance. Encourage teams to adopt security best practices and continuously improve our overall security posture. Work with teams to strengthen security controls as new threats emerge and evolve.
Build and maintain strong working relationships with internal stakeholders. Maintain a clear RACI for security control ownership, helping hold stakeholders accountable for compliance. Produce and share security compliance KPIs and KRIs with key stakeholders to drive visibility and action. Make sure security certifications stay up to date and that external security milestones and deadlines are met. Support or carry out security audits and testing to demonstrate compliance with mandatory security controls. Comfortable using Governance, Risk and Compliance (GRC) tools to manage and track security activities. Strong background in risk management, balancing business priorities with security requirements. Experience conducting or supporting security audits and testing activities. Actively working towards (or keen to achieve) a recognised security qualification such as ISO 27001 / 42001 / 27017 / 27701 auditor, CISM, CISSP, COBIT, CISA, CGEIT, or an equivalent.