This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
We are seeking a Cyber Security Compliance Specialist to drive and sustain compliance with CHARM security controls across the Cyber organisational landscape. The role focuses on ensuring adherence to Vodafone Security Baseline requirements across IT, cloud, and network environments, while supporting audit readiness and strengthening cyber control effectiveness. The individual will work closely with Cyber Security, Technology, and Architecture stakeholders to manage risks, track remediation, and continuously improve compliance maturity within the CHARM framework.
Job Responsibility
Ensure adherence to Vodafone’s Cyber Security Baseline requirements and CHARM control framework
Drive lifecycle compliance for security controls such as hardening, patching, and vulnerability management across IT, cloud, and network domains
Perform and support periodic control assessments, operational effectiveness reviews, and evidence validation activities
Contribute to internal and external audits (e.g. Internal Audit, Group Cyber Assurance), including evidence preparation and remediation tracking
Provide governance oversight and security input for systems under development or undergoing significant change
Maintain, analyse, and present compliance dashboards, metrics, and trends to enable risk-based decisions
Participate in cyber risk assessments, including identification, analysis, and mitigation tracking
Collaborate with stakeholders including Technology, Architecture, Service Owners, and Local Markets to address control gaps and risks
Support continuous improvement of compliance processes, including standardisation and automation initiatives
Requirements
Experienced in Information Security Governance, Risk, and Compliance within a large or multi-market environment
Knowledgeable in security governance frameworks and compliance lifecycle management
Skilled in supporting audits, assurance reviews, and regulatory compliance activities
Comfortable coordinating with diverse stakeholders across Technology, Architecture, and Operations
Familiar with IT service management concepts and frameworks such as ITIL
Possess working knowledge of infrastructure, operating systems (Windows, Unix/Linux), middleware, and cloud environments from a governance perspective
Able to translate high-level security requirements into practical compliance actions
Highly organised with strong attention to detail and the ability to manage multiple priorities
Confident communicator with strong written and verbal English skills
Professionally qualified with certifications such as CISM or equivalent, ISO27001 training, and proficiency in Microsoft Office (including advanced Excel) and Microsoft Power Platform tools
What we offer
Opportunity to work within a global cyber security and compliance ecosystem
Exposure to large-scale, multi-market technology environments
Involvement in high-impact audit and assurance programmes
Collaborative working environment with cross-functional stakeholders
Continuous learning and professional development in cyber security governance and compliance practices