Cyber Security Specialist (GRC)

## Join Us\n\nAt Vodafone, we\u2019re not just shaping the future of connectivity for our customers \u2013 we\u2019re shaping the future for everyone who joins our team. When you work with us, you\u2019re part of a global mission to connect people, solve complex challenges, and create a sustainable and more inclusive world. If you want to grow your career whilst finding the perfect balance between work and life, Vodafone offers the opportunities to help you belong and make a real impact.\n\n## What you\u2019ll do\n\n * As a Cyber Security Specialist, you will be integrated into the Portugal Cyber Security Governance, Risk \u0026 Control function, with responsibility for ensuring that cyber security risks are identified, assessed, governed and managed within Vodafone\u2019s risk tolerance. \n * You will be responsible be responsible for contributing to the three main areas: Cyber Risk Management, Security Governance and Control Assurance. \n * You will act as a Cyber GRC Subject Matter Expert to enable technical and business teams to operate Vodafone products and services in a secure and compliant manner, with strong focus on cyber risk, policy adherence and control effectiveness. \n * You will be responsible for ensuring that cyber security risks are properly identified, assessed, governed and managed, that security controls are effectively implemented and evidenced, and that all governance processes supporting those controls are in place, in line with Vodafone Group cyber security strategy and local market technology and business priorities. \n * You will follow up on risks, controls and remediation actions throughout their lifecycle, ensuring proper understanding of cyber security requirements, analysing, classifying and prioritising cyber risks according to business context, and supporting informed risk decisions. \n * You will report to the Cyber Security GRC Team Lead in Portugal and be an active part of the local market Cyber Security team, supporting effective collaboration with local structures such as Network, Digital \u0026 IT, Secure by Design, Cyber Defence, Corporate Security, Privacy, Legal, Risk and Compliance, among others. \n\n\n\n## Who you are\n\n * Degree, professional qualification or relevant experience in Technology Security \n * Experience in cyber security risk management, governance and control frameworks \n * Experience supporting risk registers, control assessments, audits or assurance activities \n * Knowledge of information security and risk management standards (ex: ISO/IEC 27001, NIST, COBIT) \n * Strong understanding of cyber security threats and ability to assess business and operational impact \n * Experience working with policies, standards, controls and compliance requirements \n * Strong communication skills, with the ability to explain cyber risks and control gaps in clear business language\n * Ability to work effectively across technical and non\u2011technical stakeholders, balancing security, risk and business needs \n * Fluency in the English language \n\n\n\n## Not a perfect fit?\n\nWorried that you don\u2019t meet all the desired criteria exactly? At Vodafone we are passionate about empowering people and creating a workplace where everyone can thrive, whatever their personal or professional background. If you\u2019re excited about this role but your experience doesn\u2019t align exactly with every part of the job description, we encourage you to still apply as you may be the right candidate for this role or another opportunity.\n\n## What\u0027s in it for you\n\n * Hybrid Work Model - Flexible hybrid work model with 8-10 in-office days per month, managed by team leaders\n * Vodafone Products and Services - Employees get a mobile phone, free communication plan, data card, and various discounts on services and products\n * Recognition - Recognition programs for innovative, creative, high-potential employees and exemplary behaviors\n * Health and Well-being - Well-being Program offers nutrition and psychological consultations, webinars, workshops, and discounts on various services and products\n * Learning - Access to Communities of Practice and a customizable digital training platform with high-quality content (namely Harvard Business Publishing and Skillsoft)\n * Local and International Mobility - Internal recruitment with local and international rotation opportunities across departments and roles\n\n\n\n## Who we are\n\nWe are a leading international Telco, serving millions of customers. At Vodafone, we believe that connectivity is a force for good. If we use it for the things that really matter, it can improve people\u0027s lives and the world around us. Through our technology we empower people, connecting everyone regardless of who they are or where they live and we protect the planet, whilst helping our customers do the same.\n\nBelonging at Vodafone isn\u0027t a concept; it\u0027s lived, breathed, and cultivated through everything we do. You\u0027ll be part of a global and diverse community, with many different minds, abilities, backgrounds and cultures. ;We\u0027re committed to increase diversity, ensure equal representation, and make Vodafone a place everyone feels safe, valued and included.\n\nIf you require any reasonable adjustments or have an accessibility request as part of your recruitment journey, for example, extended time or breaks in between online assessments, please refer to https://careers.vodafone.com/application-adjustments/ for guidance.\n\nTogether we can.\n