Secure By Supplier Cyber Security Consultant

VOIS; Pune District; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

VOIS in India is seeking a Secure by Supplier Cyber Security Consultant to embed secure-by-design principles into supplier engagements from the earliest stages. You will assess supplier security postures, specify controls and support contractual negotiations to minimise risk.

You will collaborate with business and technology teams, communicate risks to non-technical stakeholders and help ensure compliance with UK Telecom Security Regulations and Vodafone standards across the supply chain.

Qualifications

• Experience assessing supplier cyber security and providing risk-based recommendations.
• Ability to communicate security requirements to technical and non-technical audiences.
• Knowledge of cloud, network and identity security concepts.
• Understanding of regulatory compliance in telecom and security standards.
• Experience with security governance across SaaS/PaaS/IaaS.

Responsibilities

• Perform technical assessments of supplier security capabilities and compliance.
• Evaluate risks using a standardised methodology and identify mitigations.
• Provide security recommendations to support supplier selection.
• Engage with external suppliers to understand their security positions.
• Collaborate with internal SMEs to verify supplier security positions.
• Communicate cyber security risks to business and technology stakeholders.
• Support contract negotiations by specifying security requirements.
• Develop and maintain assessment tools and processes.
• Advise on secure-by-design principles across supplier engagements.
• Ensure suppliers adhere to Vodafone security standards and regulatory obligations.

Skills

Supplier security

Security risk assessment

Regulatory compliance

Stakeholder management

Cloud security

Networking basics

Security governance

Education

Bachelor's degree in Information Security

CISSP or equivalent

Job description

Who we are

VOIS (Vodafone Intelligent Solutions) is a strategic arm of Vodafone Group Plc, creating value for customers by delivering intelligent solutions through Talent, Technology & Transformation.
As the largest shared services organisation in the global telco industry with 30,000 FTE, our portfolio of next-generation solutions and services are designed in partnership with customers across Vodafone Group, local markets, and partner markets to simplify and drive growth. With our strategic partner Accenture, we work alongside our Vodafone customers, other Telco and tech companies to drive transformation, meet the challenges of our industry and ensure we stay relevant and resilient. This partnership is a unique, industry-first model which brings together the best of in-house and 3rd party capability.
We work with customers across 28 countries from 10 VOIS locations: Albania, Egypt, Hungary, India, Romania, Spain, Turkey, UK, Germany, Ireland, and with a network of teams in Czech Republic, Italy, Greece, and Portugal.
#VOIS #BeUnrivalled #CreateTheFuture

About this Role

We are seeking a Secure by Supplier Cyber Security Consultant to help embed secure-by-design principles into supplier engagements from the earliest stages of the supplier lifecycle. This role focuses on identifying, assessing and mitigating cyber security and regulatory risks associated with third-party suppliers, while ensuring compliance with UK Telecom Security Regulations and Vodafone’s internal security standards.

The successful candidate will work closely with business, technology and supplier stakeholders to evaluate supplier security postures, provide risk-based security recommendations, influence sourcing decisions, and support the inclusion of appropriate contractual controls. This is an opportunity to play a key role in protecting Vodafone’s supply chain while enabling secure and compliant business operations.

What you’ll do

• Perform technical assessments of supplier security capabilities and regulatory compliance during supplier sourcing and contracting activities.
• Evaluate security and compliance risks using a standardised assessment methodology and identify effective mitigation measures.
• Provide security recommendations to support supplier selection and sourcing decisions.
• Engage with external suppliers to understand, validate and influence their security and regulatory compliance positions.
• Collaborate with internal subject matter experts and stakeholders to verify supplier security positions and support effective decision-making.
• Act as the technical security specialist when communicating cyber security risks to business, technology and supplier stakeholders.
• Support supplier contract negotiations by identifying technical security requirements and recommending contractual controls to minimise risk.
• Develop, maintain and improve relevant processes, reporting and assessment tools.
• Provide guidance on cyber security and compliance-related matters to internal colleagues and suppliers.
• Promote security as a business enabler and support the adoption of secure-by-design principles across supplier engagements.
• Ensure suppliers understand and adhere to Vodafone’s security standards and regulatory obligations.

Who you are

• Experience working in a pre-sales, sourcing, risk assessment or supplier security environment, evaluating responses and determining security recommendations.
• Strong ability to communicate security requirements, risks and mitigation measures to both technical and non-technical audiences.
• Good understanding of networking concepts, traffic flows, network architecture and security best practices.
• Experience managing and influencing stakeholders across different levels of an organisation.
• Significant professional experience in information technology and cyber security, ideally within supplier risk, security assurance or governance roles.
• Knowledge of cloud security, web services security, container security, connectivity, identity and access management, network security and penetration testing concepts.
• Understanding of security governance across Software as a Service (SaaS), Platform as a Service (PaaS) and Infrastructure as a Service (IaaS) environments.
• Expertise across telecommunications technologies including:
  • Switching and routing technologies
  • Routers, modems and Optical Network Terminals (ONTs)
  • Radio Access Networks (RAN)
  • Core routers, firewalls and border gateways
  • Mobile devices, tablets and IoT environments
  • Mobile Private Networks (MPN) using 4G/5G technologies
• University degree in Information Security or an equivalent discipline.
• One or more recognised industry certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor, GIAC, TOGAF, SABSA or equivalent.
• 5+ years of experience in cyber security.

Not a perfect fit?

Concerned you may not meet every requirement? Vodafone is committed to creating an inclusive workplace where everyone can thrive. If you are excited about this role but your experience does not align exactly with every aspect of the job description, you are encouraged to apply. You may be the right candidate for this or another opportunity, and the recruitment team will support you in exploring where your skills fit best.

Whats in it for you

• Opportunity to influence supplier security decisions across a global telecommunications environment.
• Exposure to complex cyber security, supplier assurance and regulatory compliance challenges.
• Collaboration with business, technology and cyber security specialists across multiple functions.
• Ability to contribute directly to Vodafone’s supply chain security strategy and risk reduction objectives.
• Experience working with evolving telecom security regulations and industry-leading security practices.
• Opportunity to shape secure-by-design adoption across supplier ecosystems.

What skills you will learn

• Advanced supplier cyber security assessment and assurance techniques.
• Regulatory compliance evaluation, including UK Telecom Security requirements.
• Security risk quantification, recommendation development and risk mitigation planning.
• Contractual security control evaluation and negotiation support.
• Supplier governance and third-party risk management practices.
• Stakeholder management and executive-level security communication.
• Telecom network security across fixed, mobile and emerging technology environments.
• Security governance across cloud, SaaS, PaaS and IaaS delivery models.

VOIS Equal Opportunity Employer Commitment

Vodafonerecognisesand celebrates the value of diversity in building a workforce that reflects the customers and communities it serves. No form of discrimination is tolerated. This includes, but is not limited to, discrimination based on race,colour, age, veteran status, gender identity, gender expression, sexual orientation, pregnancy, maternity or parental status, ethnicity, disability, religion or belief, political affiliation, trade union membership, nationality, citizenship, indigenous status, medical condition, HIV status, neurodiversity, social origin, cultural background, marital or civil partnership status, or socio-economic background.

Join Us

At Vodafone, we’re working hard to build a better future. A more connected, inclusive and sustainable world. As a dynamic global community, its our human spirit, together with technology, that empowers us to achieve this.
We challenge and innovate in order to connect people, businesses, and communities across the world. Delighting our customers and earning their loyalty drive us, and we experiment, learn fast and get it done, together.
With us, you can truly be yourself and belong, share inspiration, embrace new opportunities, thrive, and make a real difference.

Follow us on social media

• LinkedIn: https://www.linkedin.com/company/vois/
• Facebook: https://www.facebook.com/voisglobal
• Instagram: https://www.instagram.com/voisglobal/
• You can also chat with our employees to learn more about our projects: https://lnkd.in/dpkrcvR2