Secure By Design Manager

Vodafone; Portugal; Hybrid; EUR 55,000 - 90,000; Full time

Benefits offered by this job

Hybrid work model

Mobile phone plan and discounts

Well-being and training resources

Career mobility

Recognition programs

Access to training platforms

Job summary

Vodafone procura um Secure by Design Manager para liderar a segurança desde o design até à implementação, assegurando que os produtos e serviços cumpram padrões de segurança globais. O papel envolve orientação estratégica, atuação como coach de cyber em equipas ágeis e colaboração com arquitetos de soluções e equipas de desenvolvimento.

O candidato ideal tem forte experiência em cibersegurança, DevSecOps, inglês fluente e capacidade de comunicar requisitos de segurança a stakeholders de

Qualifications

• Diploma universitário em Segurança da Informação ou equivalente.
• Certificações como CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor, GIAC, TOGAF, SABSA ou equivalente.
• 3–5 anos de experiência em cibersegurança.
• Experiência profissional em TI, cibersegurança, DevSecOps.
• Bom conhecimento de assegurar ambientes em nuvem, serviços web, pipelines CI/CD, segurança de containers, conectividade, gestão de acessos, testes de intrusão é desejável.
• Fluência em inglês.

Responsibilities

• Interface entre disciplinas técnicas e o negócio para avaliações de segurança.
• Participar em due diligence técnica durante M&A.
• Fornecer orientação de segurança de design e arquitetura; atuar como cyber coach em projetos ágeis.
• Assessorar arquitetos, designers e developers em cibersegurança.
• Abordar aspetos de Segurança e Privacidade by Design com foco em exigências de parceiros e projetos M&A.
• Planejar e coordenar testes de penetração antes do lançamento de produtos.

Skills

Cyber security

DevSecOps

English fluency

Education

University degree in Information Security

CISSP/CISM/CISA/CRISC/ISO 27001 Lead Auditor/GIAC/TOGAF/SABSA

Job description

Secure by Design Manager

Empresa : Vodafone Tipo de Emprego : Periodo Integral Portugal

Descrição do Emprego - Secure by Design Manager

Join Us

At Vodafone, we’re not just shaping the future of connectivity for our customers – we’re shaping the future for everyone who joins our team. When you work with us, you’re part of a global mission to connect people, solve complex challenges, and create a sustainable and more inclusive world. If you want to grow your career whilst finding the perfect balance between work and life, Vodafone offers the opportunities to help you belong and make a real impact.

A Secure by Design Consultant in the Global Cyber VF Investments / M&A Team

• acts as the interface between the technical disciplines and the business to carry out technically orientated security assessments, setting security requirements for new products and services or changes to products and services requested by VF Partners, and assessing compliance and risk.
• Participate in technical due diligence through the mergers and acquisitions process, assessing compliance and risk prior to transaction completion.
• The Secure by Design Consultant also has an important advisory role across the business and is required to provide security design and architecture guidance as well as general security consultancy, acts as cyber coach to agile projects and programme teams to ensure that future infrastructures and products for Vodafone globally are secure.
• Is subject matter expert for Cyber Security and works closely with solution architects, designers and developers
• Covers the Cyber related aspects of the Security and Privacy by Design and Assurance process with specific focus on demands from VF Partners and M&A projects.
• Scopes and coordinates security penetration testing prior to product launch.

What you’ll do

• Impact on the business – This role will provide that all global products, services, and infrastructure for Enterprise customers, consumers, or being used internally by Vodafone are secure by design and will meet an appropriate technology security level, and demonstrate that all potential risks are being mitigated to an acceptable level to in order to assure the confidentiality, integrity and availability of systems and data;
• Customers, supplier and third parties – provide advice and guidance to internal and external customers on security related matters. Define, communicate and ensure that suppliers and third parties understand and comply with Vodafone’s security standards;
• Leadership and teamwork – Leadership and teamwork are essential this role, the Secure by Design manager needs to work closely with the business and technology architecture teams, design and operations teams, and with the other security teams e.g. Risk & Compliance, Ethical Hacking, Security Operations, and Corporate Security. The role holder will also be required to manage external resource and coach Security Champions in the agile teams;
• Innovation and change – This person will help change the perception that security is an inhibiter, and work to demonstrate that security can be a business differentiator by enabling the business with secure by design for its products and services. In order to achieve this, proactivity and and attitude to identify best practices that can be spread to other APIs are key success factors;
• Communication –Must have ability to communicate security requirements and risks to all levels of the business. The experience to explain complex technical matters to non-technical business executives is crucial. The role, is expected to give clear guidance for implementing security controls in complex environments.

Who you are

• University degree in Information Security or equivalent;
• One or more of the following: CISSP, CISM, CISA, CRISC, ISO 27001 Lead Auditor, GIAC, TOGAF, SABSA or equivalent;
• 3-5 years work experience in the field of cyber security;
• Professional experience in information technology, Cyber security as well as experience with security in agile ways of working, DevSecOps.
• Good knowledge/experience with securing of cloud environments, web services, CI/CD pipelines, container security, connectivity, user access management, networks and penetration testing experience beneficial;
• Fluency in English.

Not a perfect fit?

Worried that you don’t meet all the desired criteria exactly? At Vodafone we are passionate about empowering people and creating a workplace where everyone can thrive, whatever their personal or professional background. If you’re excited about this role but your experience doesn’t align exactly with every part of the job description, we encourage you to still apply as you may be the right candidate for this role or another opportunity.

What's in it for you

• Hybrid Work Model -Flexible hybrid work model with 8-10 in-office days per month, managed by team leaders;
• Vodafone Products and Services - Employees get a mobile phone, free communication plan, data card, and various discounts on services and products;
• Recognition - Recognition programs for innovative, creative, high-potential employees and exemplary behaviors;
• Health and Well-being - Well-being Program offers nutrition and psychological consultations, webinars, workshops, and discounts on various services and products;
• Learning - Access to Communities of Practice and a customizable digital training platform with high-quality content (namely Harvard Business Publishing, Skillsoft and Speexx);
• Local and International Mobility - Internal recruitment with local and international rotation opportunities across departments and roles.

Who we are

We are a leading international Telco, serving millions of customers. At Vodafone, we believe that connectivity is a force for good. If we use it for the things that really matter, it can improve people's lives and the world around us. Through our technology we empower people, connecting everyone regardless of who they are or where they live and we protect the planet, whilst helping our customers do the same.

Belonging at Vodafone isn't a concept; it's lived, breathed, and cultivated through everything we do. You'll be part of a global and diverse community, with many different minds, abilities, backgrounds and cultures. ;We're committed to increase diversity, ensure equal representation, and make Vodafone a place everyone feels safe, valued and included.

If you require any reasonable adjustments or have an accessibility request as part of your recruitment journey, for example, extended time or breaks in between online assessments, please refer to https://careers.vodafone.com/application-adjustments/ for guidance.

Together we can.