Cyber Prevent Manager

Vodafone Group Plc; Fatih; On-site; TRY 3,263,403 - 5,594,406; Full time

Job summary

Vodafone Group Plc is looking for an experienced professional to oversee cyber security operations aimed at safeguarding our IT infrastructure. Your role will involve managing various security tools and applications, ensuring compliance with legal requirements, and coordinating security tests.

The ideal candidate will possess a BSc, preferably a Master's degree with at least 10 years of experience in Information Security, along with relevant certifications such as CISSP, CEH, or OSCP. Fluency in English is a must.

Qualifications

• 10 years of progressive experience in Information Security.
• CISSP, CEH, OSCP certifications preferred.
• Advanced knowledge of security principles and practices.

Responsibilities

• Manage cyber security tools and applications operations.
• Plan and coordinate cyber security tools' acceptance tests.
• Conduct risk assessments and communicate results to management.
• Ensure compliance with Legal and Regulatory requirements.
• Research and assess new security threats and recommend actions.

Skills

Cyber security tools and applications

Network Security

Endpoint security tools

DLP

Fluent in English

Education

BSc in Computer/Industrial/Electrical & Electronics Engineering

Masters in Computer Science or equivalent

Tools

Intrusion detection and prevention Systems

Data Loss Prevention tools

Web Application Firewall

SIEM

Job description

Join Us

At Vodafone, we’re not just shaping the future of connectivity for our customers – we’re shaping the future for everyone who joins our team. When you work with us, you’re part of a global mission to connect people, solve complex challenges, and create a sustainable and more inclusive world. If you want to grow your career whilst finding the perfect balance between work and life, Vodafone offers the opportunities to help you belong and make a real impact.

What you’ll do

• Responsible for the effective operations of cyber security tools and applications such as Network Security controls, Endpoint security tools, DLP, Logging and Monitoring framework, PUAM, DAM etc.
• Responsible for planning and coordinating cyber security tools' acceptance tests, implementations on IT, network infrastructure and applications, communicate the identified risks and impacts to Senior Management.
• Responsible for providing accurate and timely reporting of technology security risks identified during secure by design assessments, project engagement and propose remediation and mitigation options in line with policy and good practice.
• Work closely with different IT, NW, business and project teams to ensure security controls and procedures are understood and successfully implemented and actively monitored.
• Act as escalation point for cyber security operations, manage on-call schedule with the team.
• Engage with stakeholders on cyber security operational compliance to control effectiveness and operating effectiveness of information security controls and recommend opportunities for continuous improvement.
• Ensure compliance with Legal and Regulatory requirements.
• Research and assess new threats and security alerts, and recommend remedial actions through the whole lifecycle of enterprise services.
• Evaluate existing or emerging technologies and vendor service portfolio to consider factors such as cost, security, compatibility and usability.
• Approve security models and baseline, security configuration and installation of proxy, IDS/IPS, WAF. Coordinate the security review, definition and evaluation of project proposals and tender materials in relation to information security requirements where there is information security operational relevance.
• Maintain the IT & NW security solutions assuring confidentiality and consistency and availability for other departments to use outcomes of these solutions.
• Participation in Cyber Risk Management process. Communicates or assists in communicating the results of audit and consulting projects.
• Provide support for application developments by determining security and compliance requirements and review fulfilment of these requirements on WAF tool. Maintain the Cyber Security solutions assuring confidentiality and consistency and availability for other departments to use outcomes of these solutions.

Who You Are

• BSc. in Computer/Industrial/Electrical & Electronics Engineering or equivalent degrees is desired.
• Masters degree (preferably in Computer Science) or equivalent information security experience is desired.
• CISSP, CEH, OSCP certifications are preferred.
• Thorough understanding of security principles, practices and standards and how they translate into real world technical solutions.
• Ability to communicate complex technology concepts both at high level as well as on technical level. Demonstrated working knowledge of cyber security solutions on network, IT and relevant infrastructure level.
• Minimum 10 years progressive experience in Information Security.
• Advanced knowledge of major security tools and technologies such as intrusion detection and prevention Systems, data loss prevention, web application firewall, SIEM, DAM, PUAM and identity management.
• Fluency in English.