Secure by Supplier Cyber Security Consultant

Vodafone Group Plc; Pune District; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

VOIS, Vodafone Intelligent Solutions, seeks a Secure by Supplier Cyber Security Consultant to embed secure-by-design principles into supplier engagements from the earliest stages of the lifecycle. You will assess supplier security postures and regulatory compliance, guiding sourcing decisions and negotiating contractual controls.

You will work with business, technology and supplier stakeholders, communicate risks clearly, and develop processes and tools to strengthen Vodafone's supply chain

Qualifications

• Bachelor's degree in information security, IT, or related field.
• Professional certifications such as CISSP, CISM, or equivalent.
• Minimum 5+ years in cyber security, supplier risk or governance.

Responsibilities

• Perform supplier security assessments and regulatory compliance checks during sourcing and contracting.
• Identify and communicate risk mitigation measures to stakeholders.
• Support contract negotiations with technical security requirements.
• Develop and maintain security assessment processes and tools.

Skills

Secure by design

Cyber security

Supplier risk management

Regulatory compliance

Cloud security

Stakeholder management

Telecommunications security

Education

Bachelor's degree in Information Security

CISSP or equivalent certification

Job description

Who we areVOIS (Vodafone Intelligent Solutions) is a strategic arm of Vodafone Group Plc, creating value for customers by delivering intelligent solutions through Talent, Technology & Transformation.As the largest shared services organisation in the global telco industry with 30,000 FTE, our portfolio of next-generation solutions and services are designed in partnership with customers across Vodafone Group, local markets, and partner markets to simplify and drive growth. With our strategic partner Accenture, we work alongside our Vodafone customers, other Telco and tech companies to drive transformation, meet the challenges of our industry and ensure we stay relevant and resilient. This partnership is a unique, industry-first model which brings together the best of in-house and 3rd party capability.We work with customers across 28 countries from 10 VOIS locations: Albania, Egypt, Hungary, India, Romania, Spain, Turkey, UK, Germany, Ireland, and with a network of teams in Czech Republic, Italy, Greece, and Portugal.#VOIS #BeUnrivalled #CreateTheFutureAbout this RoleWe are seeking a Secure by Supplier Cyber Security Consultant to help embed secure-by-design principles into supplier engagements from the earliest stages of the supplier lifecycle. This role focuses on identifying, assessing and mitigating cyber security and regulatory risks associated with third-party suppliers, while ensuring compliance with UK Telecom Security Regulations and Vodafone’s internal security standards.The successful candidate will work closely with business, technology and supplier stakeholders to evaluate supplier security postures, provide risk-based security recommendations, influence sourcing decisions, and support the inclusion of appropriate contractual controls. This is an opportunity to play a key role in protecting Vodafone’s supply chain while enabling secure and compliant business operations.What you’ll doPerform technical assessments of supplier security capabilities and regulatory compliance during supplier sourcing and contracting activities.Evaluate security and compliance risks using a standardised assessment methodology and identify effective mitigation measures.Provide security recommendations to support supplier selection and sourcing decisions.Engage with external suppliers to understand, validate and influence their security and regulatory compliance positions.Collaborate with internal subject matter experts and stakeholders to verify supplier security positions and support effective decision-making.Act as the technical security specialist when communicating cyber security risks to business, technology and supplier stakeholders.Support supplier contract negotiations by identifying technical security requirements and recommending contractual controls to minimise risk.Develop, maintain and improve relevant processes, reporting and assessment tools.Provide guidance on cyber security and compliance-related matters to internal colleagues and suppliers.Promote security as a business enabler and support the adoption of secure-by-design principles across supplier engagements.Ensure suppliers understand and adhere to Vodafone’s security standards and regulatory obligations.Who you areExperience working in a pre-sales, sourcing, risk assessment or supplier security environment, evaluating responses and determining security recommendations.Strong ability to communicate security requirements, risks and mitigation measures to both technical and non-technical audiences.Good understanding of networking concepts, traffic flows, network architecture and security best practices.Experience managing and influencing stakeholders across different levels of an organisation.Significant professional experience in information technology and cyber security, ideally within supplier risk, security assurance or governance roles.Knowledge of cloud security, web services security, container security, connectivity, identity and access management, network security and penetration testing concepts.Understanding of security governance across Software as a Service (SaaS), Platform as a Service (PaaS) and Infrastructure as a Service (IaaS) environments.Expertise across telecommunications technologies including:Switching and routing technologiesRouters, modems and Optical Network Terminals (ONTs)Radio Access Networks (RAN)Core routers, firewalls and border gatewaysMobile devices, tablets and IoT environmentsMobile Private Networks (MPN) using 4G/5G technologiesUniversity degree in Information Security or an equivalent discipline.One or more recognised industry certifications such as CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor, GIAC, TOGAF, SABSA or equivalent.5+ years of experience in cyber security.Not a perfect fit?Concerned you may not meet every requirement? Vodafone is committed to creating an inclusive workplace where everyone can thrive. If you are excited about this role but your experience does not align exactly with every aspect of the job description, you are encouraged to apply. You may be the right candidate for this or another opportunity, and the recruitment team will support you in exploring where your skills fit best.What's in it for youOpportunity to influence supplier security decisions across a global telecommunications environment.Exposure to complex cyber security, supplier assurance and regulatory compliance challenges.Collaboration with business, technology and cyber security specialists across multiple functions.Ability to contribute directly to Vodafone’s supply chain security strategy and risk reduction objectives.Experience working with evolving telecom security regulations and industry-leading security practices.Opportunity to shape secure-by-design adoption across supplier ecosystems.What skills you will learnAdvanced supplier cyber security assessment and assurance techniques.Regulatory compliance evaluation, including UK Telecom Security requirements.Security risk quantification, recommendation development and risk mitigation planning.Contractual security control evaluation and negotiation support.Supplier governance and third-party risk management practices.Stakeholder management and executive-level security communication.Telecom network security across fixed, mobile and emerging technology environments.Security governance across cloud, SaaS, PaaS and IaaS delivery models.VOIS Equal Opportunity Employer CommitmentVodafone recognises and celebrates the value of diversity in building a workforce that reflects the customers and communities it serves. No form of discrimination is tolerated. This includes, but is not limited to, discrimination based on race, colour, age, veteran status, gender identity, gender expression, sexual orientation, pregnancy, maternity or parental status, ethnicity, disability, religion or belief, political affiliation, trade union membership, nationality, citizenship, indigenous status, medical condition, HIV status, neurodiversity, social origin, cultural background, marital or civil partnership status, or socio-economic background.Join UsAt Vodafone, we’re working hard to build a better future. A more connected, inclusive and sustainable world. As a dynamic global community, it's our human spirit, together with technology, that empowers us to achieve this.We challenge and innovate in order to connect people, businesses, and communities across the world. Delighting our customers and earning their loyalty drive us, and we experiment, learn fast and get it done, together.With us, you can truly be yourself and belong, share inspiration, embrace new opportunities, thrive, and make a real difference.AlertApply for Vodafone jobs only through the official Vodafone Careers website to avoid job scams and fraud.#JDEnhancedByTARAFollow us on social mediaLinkedIn: https://www.linkedin.com/company/vois/Facebook: https://www.facebook.com/voisglobalInstagram: https://www.instagram.com/voisglobal/You can also chat with our employees to learn more about our projects: https://lnkd.in/dpkrcvR2