This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
We are seeking an experienced cyber security professional to lead the Vulnerability Management and Responsible Disclosure services across VOIS. The individual will ensure that vulnerabilities are consistently identified, assessed, prioritised, and addressed in alignment with Vodafone’s global cyber strategy. The role also includes oversight of all externally reported vulnerabilities through a structured, secure, and policy‑aligned Responsible Disclosure programme. This position blends operational leadership, people development, automation enhancement, audit readiness, and continuous service maturity.
Job Responsibility:
Lead the Vulnerability Management and Responsible Disclosure services, ensuring alignment with Vodafone’s global policies and cyber strategy
Manage the full lifecycle of the Responsible Disclosure programme, including triage, validation, prioritisation, communication, and closure
Oversee vulnerability triage and prioritisation by applying strong risk‑based decision‑making and effective coordination with remediation teams
Drive improvements in automation, tooling effectiveness, and workflow optimisation to elevate efficiency and reduce manual workloads
Define, streamline, and own vulnerability management KPIs and reporting to offer transparent insights for leadership and stakeholders
Serve as a primary contact point for internal and external cyber security audits related to vulnerability management and disclosure processes
Lead cross-functional initiatives within Cyber Defence to enhance governance, delivery excellence, and operational maturity
Build, guide, and nurture a high-performing team through inclusive leadership, talent development, structured hiring, and succession planning
Promote strong engagement, continuous learning, and year‑on‑year improvements in team capability, efficiency, and retention
Requirements:
Experienced cyber security professional with deep expertise in vulnerability management and remediation
Background in managing large‑scale scanning and reporting programmes
Hands‑on proficiency with vulnerability management tools, specifically Qualys
Strong understanding of networking fundamentals and core security concepts
Knowledgeable in industry cyber security standards, governance frameworks, and policy structures
Skilled in leading distributed teams and fostering high-performance cultures
Capable of influencing senior stakeholders and guiding change across complex environments
Strong analytical capability to translate technical risk into business-focused insights
Excellent written, verbal, and executive communication skills