You will lead the Security, Risk and GDPR Compliance team and play a key role in its success. In this role, you will functionally report into Audit and Compliance – Functional Manager of VCI (Vodafone Cloud and Hosting Infrastructure team) and internally to Regulatory Policy and Compliance lead within the GSL and work to identify and mitigate security risks on VCI scoped systems and advise compliance measures to protect against the risk of potential threats and non-compliance. You will collaborate closely with other security teams, Service Owners and internal/external auditors to coordinate CHARM and GDPR Compliance, focusing to ensure external audit compliance.
You will work as the Team lead and be responsible for carrying out operational activities as needed to ensure there are no deficiencies or non-conformities against Security and Privacy controls, while also leading the rest of the members on the same.
As a lead for the team, while driving compliance is a must, the prospective candidate will also be responsible to ramp up transformation’s activities for the service owner for the respective entity. The candidate must prepare regular reports and dashboards representing compliance levels and actions needed by the Service owner. The ideal candidate should be able to challenge existing security, privacy, compliance and SOX processes to ensure unnecessary compliance over heads are removed. The lead will also need to prepare steerco material and presentations.
With these activities you will have a great impact on our business:
•You will Lead the Compliance team and thereby maintain compliance.
•You will be in charge of compliance with internal and external guidelines, processes, and policies
•You will deliver against the defined KPI’s for compliance, security, privacy, cyber security baseline.
•You will identify recurring issues & needs in day-to-day business.
•You will create, maintain, and update processes, procedures, SOPs, knowledge bases, and playbooks.
•You will proactively collaborate with the Service owners
•You will driving Automation and Process Stabilization.
•You will create management reports, presentations and Dashboards.
•You will take full ownership of audits.
•You will coordinate evidence/data gathering and documentation and review Security audit reports
•You have prior experience in Information Security Audit domain
•You have experience of global customer handling & stakeholder management.
•You have a reputation for self-motivation, integrity, cultural sensitivity, and strong interpersonal skills
•You have practical knowledge of ISO27001, NIST or CSF frameworks, its application within an IT department, and of managing compliances with third parties.
•You have IT Audit and GDPR experience
•You have strong Communication & Facilitation skills both verbal and written, presentation skills.
•You have Agile thinking and working
•You have a understanding of concepts in Datacentre and Cyber Security
•You have good practical knowledge of ITIL disciplines.
•You define and assist in creation of operational and executive reports.
•You provide leadership and guidance in project planning, task definition, estimating, reporting, scheduling, documentation, and workflow.
