Application In Life Assessment (AILA) Consultant - VOIS

Vodafone; Pune District; Presencial; INR 2.500.000 - 4.500.000; Jornada completa

Descripción de la vacante

VOIS (Vodafone Intelligent Solutions) is seeking a Cyber Security Application Risk & Assessment Consultant to join our Cybersecurity team and support the secure operation of Vodafone products and services throughout their lifecycle. This role focuses on evaluating security risks, conducting security design and technical assessments, and ensuring that secure-by-design principles are consistently applied.

The successful candidate will collaborate with business, technology and third-party

Formación

• 6+ years in cyber security or technology risk roles.
• Experience with ISO 27001, NIST, OWASP and related standards.
• University degree in Information Security or equivalent.

Responsabilidades

• Conduct Application In-Life Assessments across live products and services.
• Perform security design reviews and technical assessments to identify risks.
• Maintain the Risk Register with identified risks.
• Drive risk remediation to closure and manage risk acceptance.
• Provide cyber security expertise to support risk decisions.
• Engage with stakeholders and vendors to improve security controls.
• Identify recurring risk themes and suggest process improvements.
• Support reporting and communications for cyber security leadership.

Conocimientos

Cyber security risk

Cloud security

Risk assessment

Security design

Stakeholder management

Communication skills

Educación

CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor, GIAC, TOGAF, SABSA or equivalent certification

Herramientas

AWS

GCP

OWASP

Descripción del empleo

Who we are

VOIS (Vodafone Intelligent Solutions) is a strategic arm of Vodafone Group Plc, creating value for customers by delivering intelligent solutions through Talent, Technology & Transformation.

As the largest shared services organisation in the global telco industry with 30,000 FTE, our portfolio of next-generation solutions and services are designed in partnership with customers across Vodafone Group, local markets, and partner markets to simplify and drive growth. With our strategic partner Accenture, we work alongside our Vodafone customers, other Telco and tech companies to drive transformation, meet the challenges of our industry and ensure we stay relevant and resilient. This partnership is a unique, industry-first model which brings together the best of in-house and 3rd party capability.

We work with customers across 28 countries from 10 VOIS locations: Albania, Egypt, Hungary, India, Romania, Spain, Turkey, UK, Germany, Ireland, and with a network of teams in Czech Republic, Italy, Greece, and Portugal.

#VOIS #BeUnrivalled #CreateTheFuture

About this Role

We are seeking a Cyber Security Application Risk & Assessment Consultant to join our Cybersecurity team and support the secure operation of Vodafone products and services throughout their lifecycle. This role focuses on evaluating security risks, conducting security design and technical assessments of live applications and services, and ensuring that secure-by-design principles are consistently applied. The successful candidate will collaborate with business, technology and third-party stakeholders to identify, assess and manage cyber security risks while providing trusted security consultancy and architecture guidance.

What you’ll do

• Conduct Application In-Life Assessments across live products, applications and services.
• Perform security design reviews and technical security assessments to identify cyber security risks.
• Ensure a consistent and standardised assessment approach is followed to capture risks and recommend appropriate mitigation actions.
• Create, maintain and manage risks within the Risk Register.
• Drive risk remediation activities to closure and facilitate risk acceptance where remediation is not achievable.
• Provide cyber security expertise and recommendations to support security and risk management decisions.
• Offer security design, architecture guidance and cyber security consultancy to business and technology teams.
• Engage with internal stakeholders and external vendors to assess and improve security controls.
• Identify recurring risk themes and contribute to process improvements that strengthen organisational cyber resilience.
• Support reporting, communications and engagement activities for cyber security leadership and stakeholders.
• Promote best practices across network security, cloud security, application security and risk management disciplines.

Who you are

• You have 6+ years of experience in cyber security, information security or a related technology risk role.
• You possess strong technical knowledge and practical experience in cyber security risk assessment and assurance activities.
• You have experience working with recognised standards and frameworks such as ISO 27001, ISO 22301, ISO 31000, NIST 800-53 and OWASP.
• You understand technology risk management disciplines, including network security, cloud security, application security and enterprise risk management.
• You have experience securing cloud-based environments, particularly Amazon Web Services (AWS) and Google Cloud Platform (GCP).
• You are familiar with web services, container security and connectivity security concepts.
• You can effectively communicate complex technical concepts and risks to both technical and non-technical audiences.
• You have strong stakeholder management, collaboration and influencing skills.
• You can identify, assess, document and manage cyber security risks in complex environments.
• You hold a university degree in Information Security or an equivalent discipline.

Essential Qualifications

• CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor, GIAC, TOGAF, SABSA or equivalent certification.

Desirable Experience

• Knowledge of Information Security Assurance frameworks such as NIST SP 800-37 and COBIT 5.
• Knowledge of Data Privacy, Information Protection and GDPR.
• Experience within the telecommunications industry.
• PMP or PRINCE2 Practitioner certification.
• ITIL, Scrum or Lean Six Sigma certification.

Not a perfect fit?

Concerned you may not meet every requirement? Vodafone is committed to creating an inclusive workplace where everyone can thrive. If you are excited about this role but your experience does not align exactly with every aspect of the job description, you are encouraged to apply. You may be the right candidate for this or another opportunity, and the recruitment team will support you in exploring where your skills fit best.

What's in it for you

• Opportunity to work on large-scale global cyber security programmes and live enterprise services.
• Exposure to diverse technologies, cloud platforms and business environments.
• Collaboration with cross-functional teams including business, technology and external partners.
• Opportunity to influence security strategy, risk reduction initiatives and secure-by-design practices.
• A role that combines security consulting, risk management and technical assessment expertise.
• Continuous professional growth within a global technology and telecommunications environment.

What skills you will learn

• Advanced application security assessment methodologies.
• Cyber security architecture review and advisory capabilities.
• Enterprise risk management and risk governance practices.Cloud security assessment across AWS and GCP environments.
• Security control design and effectiveness evaluation.
• Stakeholder engagement and executive-level cyber security communication.
• Regulatory, compliance and assurance framework application.
• Security risk remediation planning and tracking.

VOIS Equal Opportunity Employer Commitment

Vodafone recognises and celebrates the value of diversity in building a workforce that reflects the customers and communities it serves. No form of discrimination is tolerated. This includes, but is not limited to, discrimination based on race, colour, age, veteran status, gender identity, gender expression, sexual orientation, pregnancy, maternity or parental status, ethnicity, disability, religion or belief, political affiliation, trade union membership, nationality, citizenship, indigenous status, medical condition, HIV status, neurodiversity, social origin, cultural background, marital or civil partnership status, or socio-economic background.

Join Us

At Vodafone, we’re working hard to build a better future. A more connected, inclusive and sustainable world. As a dynamic global community, it's our human spirit, together with technology, that empowers us to achieve this. We challenge and innovate in order to connect people, businesses, and communities across the world. Delighting our customers and earning their loyalty drive us, and we experiment, learn fast and get it done, together. With us, you can truly be yourself and belong, share inspiration, embrace new opportunities, thrive, and make a real difference.