VodafoneThree - Security Assurance Lead

Working Hours: Full time 37.5 hours per week - Monday to Friday Work closely with teams across the business to build strong relationships and make sure everyone is accountable for security controls. Help support both internal and external security audits and testing, making sure we're meeting customer expectations and legal security requirements. Clearly report on how our security controls are performing based on audit and testing results. Keep track of remediation activity and follow up with control owners to ensure security issues are addressed. Analyse security risks so gaps are properly recorded, owned, and actively managed. Assess the impact of changes to customer security frameworks, legal requirements, or industry standards. Respond to internal questions and requests related to security assurance. Encourage teams to adopt security best practices and continuously improve our overall security posture. Work with teams to strengthen security controls as new threats emerge and evolve.

Build and maintain strong working relationships with internal stakeholders. Maintain a clear RACI for security control ownership, helping hold stakeholders accountable for compliance. Produce and share security compliance KPIs and KRIs with key stakeholders to drive visibility and action. Make sure security certifications stay up to date and that external security milestones and deadlines are met. Support or carry out security audits and testing to demonstrate compliance with mandatory security controls. Comfortable using Governance, Risk and Compliance (GRC) tools to manage and track security activities. Strong background in risk management, balancing business priorities with security requirements. Experience conducting or supporting security audits and testing activities. Actively working towards (or keen to achieve) a recognised security qualification such as ISO 27001 / 42001 / 27017 / 27701 auditor, CISM, CISSP, COBIT, CISA, CGEIT, or an equivalent.