AIDA CHARM Cyber Compliance Specialist - VOIS

Who we are

About this Role

We are seeking a Cyber Compliance Specialist to support the implementation and governance of cyber security controls across Vodafone Group entities. This role is pivotal in embedding security into business operations and driving strategic compliance initiatives. The individual will collaborate closely with Cyber Security and Technology teams, ensuring alignment with Vodafone’s internal standards and frameworks.

What you will do

• Drive and support the design and execution of the Compliance programme across strategic, tactical, and operational levels.
\n
• Ensure adherence to Vodafone’s Cyber Security Baseline Requirements.
\n
• Conduct control assessments, audits, and continuity testing to validate control effectiveness.
\n
• Review internal control procedures and security for systems under development or enhancement.
\n
• Contribute to the improvement of security compliance in alignment with strategic programmes.
\n
• Participate in risk assessments, data analysis, and documentation of delivery plans.
\n
• Provide timely and accurate reports to stakeholders.
\n
• Monitor and facilitate the implementation of cyber security controls and improvement initiatives.
\n
• Support internal and external audits and cyber assurance activities.
\n
• Prepare audit documentation and communicate findings effectively.
\n
• Advocate for Cyber Security compliance and awareness programmes.
\n
• Align business roadmaps with security priorities.
\n
• Conduct operational, compliance, and investigative reviews as assigned.
\n
\n

Who you are

\n
\n
• Holder of a Bachelor’s degree (Master’s degree is optional).
\n
• Certified in ISO27001 LA/LI, CISA, or CISM (mandatory).
\n
• Additional certifications such as CRISC, GDPR, SOX, COBIT, PCI-DSS, TISAX, DevSecOps are advantageous.
\n
• Skilled in stakeholder management and building strong relationships.
\n
• Strong communicator with experience in presenting to international senior managers.
\n
• Analytical and proactive in identifying security risks and process gaps.
\n
• Capable of managing multiple tasks and conversations autonomously.
\n
• Familiar with Security Architecture frameworks and technologies.
\n
• Experienced in customised reporting and investigative reviews.