Platform Operations Lead

Vodafone Group Plc; Lisboa; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid work model

Phone and data plan

Discounts on services and products

Well-being program

Training platform access

Internal mobility across departments

Job summary

Vodafone Group Plc seeks an experienced security platform lead to own the CNAPP (Wiz) platform, ensure alignment with cloud security and DevSecOps controls, and drive an federated operating model across markets.

You will lead platform engineering and operations, manage access governance and policy implementation, and push automation to improve efficiency and security outcomes globally.

Qualifications

• Bachelor or Master’s degree in a relevant field.
• Extensive CNAPP experience with posture management and runtime protection.
• Strong cloud security knowledge across AWS, Azure and GCP.
• Experience with policy-as-code, IaC security, and automation at scale.
• Expert RBAC design within enterprise platforms.
• Ability to influence senior stakeholders and communicate clearly.
• Automation/scripting (Python/PowerShell) and API integrations.
• Familiar with CIS, NIST, ISO 27001 controls.
• Experience operating in a federated / multi-market environment.
• Fluency in English.

Responsibilities

• Own the CNAPP platform operation and service model across markets.
• Act as accountable owner for platform delivery, performance and adoption.
• Define and operate a federated operating model.
• Lead platform engineering and operations teams with clear roles and priorities.
• Be senior escalation point for platform, security and integration issues.
• Own identity integration with corporate IdP (SSO) with MFA and auditability.
• Govern privileged access and API integrations with rotation and compliance.
• Oversee joiner/mover/leaver and entitlement reviews for CNAPP access.
• Drive CNAPP-based risk identification and reduction strategies.
• Define CNAPP policies, guardrails and governance aligned to Vodafone standards.
• Oversee run operations, incident management and vendor engagement.
• Drive automation, standardisation and continuous improvement.

Skills

CNAPP platforms

Cloud security

DevSecOps

Policy as code

RBAC governance

Automation

Executive communication

Multi-market experience

English fluency

Education

Bachelor/Master's Degree

Tools

Wiz

Prisma Cloud

Orca

Lacework

Defender for Cloud

Job description

Join Us

At Vodafone, we’re not just shaping the future of connectivity for our customers – we’re shaping the future for everyone who joins our team. When you work with us, you’re part of a global mission to connect people, solve complex challenges, and create a sustainable and more inclusive world. If you want to grow your career whilst finding the perfect balance between work and life, Vodafone offers the opportunities to help you belong and make a real impact.

Global Cyber Security’s role is to inspire trust and confidence in our customers by enabling secure connectivity. Our purpose is to proactively protect Vodafone & its customers by reducing the risks posed by security threats to Vodafone’s global technology infrastructure and the sensitive data it holds.

What you’ll do

• Own the overall CNAPP (Wiz) platform operation and service model, ensuring alignment to Vodafone cloud security and DevSecOps control requirements and development objectives;
• Act as the accountable owner for platform delivery, performance, and adoption across markets and domains;
• Define and operate a federated operating model;
• Lead and coordinate platform engineering and operations teams, ensuring clear roles, prioritisation, and delivery alignment;
• Act as the senior escalation point for platform, security, and integration issues;
• Own identity integration with corporate IdP (SSO), ensuring secure access (MFA, conditional access, auditability);
• Govern privileged access, service accounts, and API integrations, including rotation, monitoring, and compliance;
• Oversee joiner/mover/leaver processes, access recertification, and entitlement reviews for CNAPP access;
• Ensure CNAPP is leveraged to identify and reduce identity-based risks;
• Drive a risk-based prioritisation model leveraging CNAPP capabilities;
• Ensure effective triage, ownership, and remediation workflows across engineering and cloud teams;
• Define and track measurable outcomes;
• Ensure findings are actionable, contextualised, and integrated into delivery workflows;
• Define CNAPP policies, guardrails, and control frameworks aligned to Vodafone security standards;
• Establish governance processes for: Policy lifecycle management, Exception handling and Audit and compliance reporting; Represent CNAPP in architecture reviews, design authorities, and governance forums;
• Oversee run operations including monitoring, incident management, vendor engagement, and service optimisation;
• Drive automation, standardisation, and continuous improvement of platform efficiency and usability;
• Act as the primary senior interface between Cyber Security, Cloud, DevOps, Engineering, and Product teams;
• Influence and drive adoption of secure-by-design and DevSecOps practices across the organisation.

Who you are

• Bachelor/Master's Degree;Strong experience with CNAPP platforms (Wiz preferred), including posture management, runtime protection, and integrations;
• Deep knowledge across: Cloud security (AWS, Azure, GCP), DevSecOps and CI/CD security integration, Vulnerability and exposure management and Container & Kubernetes security;
• Experience implementing policy-as-code, IaC security, and automation at scale;
• Strong expertise in RBAC design and governance within enterprise platforms;
• Strong strategic thinking with ability to balance risk, cost, and developer experience;
• Proven ability to influence senior stakeholders and engineering teams without direct authority;
• Strong communication skills, including ability to present concise executive-level insights;
• Continuous improvement mindset with focus on automation, scalability, and measurable outcomes;
• Experience with Wiz (or similar CNAPP tooling such as Prisma Cloud, Orca, Lacework, Defender for Cloud);
• CIEM/identity posture experience (entitlement analysis, excessive privilege detection, least privilege programmes);
• Automation/scripting (Python/PowerShell) and API-based integrations;
• Familiarity with governance frameworks (CIS, NIST, ISO 27001) and mapping controls into platform policy;
• Experience operating in a federated / multi-market environment;
• Fluency in English.

What's in it for you

• Hybrid Work Model - Flexible hybrid work model with 8-10 in-office days per month, managed by team leaders;
• Vodafone Products and Services - Employees get a mobile phone, free communication plan, data card, and various discounts on services and products;
• Recognition - Recognition programs for innovative, creative, high-potential employees and exemplary behaviors;
• Health and Well-being - Well-being Program offers nutrition and psychological consultations, webinars, workshops, and discounts on various services and products;
• Learning - Access to Communities of Practice and a customizable digital training platform with high-quality content (namely Harvard Business Publishing, Skillsoft and Speexx);
• Local and International Mobility - Internal recruitment with local and international rotation opportunities across departments and roles.

Who we are

We are a leading international Telco, serving millions of customers. At Vodafone, we believe that connectivity is a force for good. If we use it for the things that really matter, it can improve people's lives and the world around us. Through our technology we empower people, connecting everyone regardless of who they are or where they live and we protect the planet, whilst helping our customers do the same.

Belonging at Vodafone isn't a concept; it's lived, breathed, and cultivated through everything we do. You'll be part of a global and diverse community, with many different minds, abilities, backgrounds and cultures. ;We're committed to increase diversity, ensure equal representation, and make Vodafone a place everyone feels safe, valued and included.

If you require any reasonable adjustments or have an accessibility request as part of your recruitment journey, for example, extended time or breaks in between online assessments, please refer to https://careers.vodafone.com/application-adjustments/ for guidance.

Together we can.