Cyber Security DevSecOps Chapter Lead

Role Purpose

The purpose of this role is to provide Cyber Security expertise and contribute to the success of the Cyber Security Function achieving Vodafone Group Cyber Security Baseline mandated requirements defined by Group CTSO including but not limited to implementing new Security layers and creating new powerful monitoring function plus insuring that security standards and requirements are implemented by all technology functions.

Key Accountabilities

• Advisor to Cyber on security decisions for the Tribe
• Disseminate Security policy, blueprints, guidance, patterns, principles and documentation to Security SPOCs (Single Point of Contact) in Development/Business teams and ensures all Vodafone security controls are applied
• Supports the area of the business to implement the Secure Agile Development Standard and supports 
• Ensure that teams have allocated Security SPOC for each agile team/squad and that they are aware of their responsibilities
• Contribute to the implementation of automated compliance and vulnerabilities scan mechanism, check and validate with the Development/Business projects compliance and vulnerabilities
• Provide feedback for Business/Development teams Security SPOC's personal development, Coach and on-board to the security Tools/track
• Maintain a close liaison between Cyber Security DevSecOps Hub and the Development/Business teams.
• Organizes weekly scrums with Security Champions using Agile toolsets and reporting back to Cyber
• Reports security risks to Cyber Security Co-ordinates local incidents
   

Core Competencies and Qualifications

• Proven experience in leading teams with various skill-set.
• Excellent teamwork skills
• Results oriented, high energy, self-motivated
• Ability to manage expectations of stakeholders 
• Strong communication and presentation skills
• Comfortable working in a project based / client serving model.
• Minimum of 5 years’ experience in Application Security positions and 2 Years in Development positions
• Technical skills:
• Strong Knowledge with DevOps technologies like Jenkins, GitHub, Docker, Kubernetes, etc.  
• Strong knowledge in different infrastructure technologies (virtualization, containers, Infrastructure as Code (IaC), ..) in addition to microservices concepts and the ability to secure these environments
• Good Development background in different languages like Java, JavaScript, angular, etc. 
• Experience of delivering technology solutions using agile methodologies Such as Scrum and Kanban
• Excellent understanding DevSecOps practices such as CI/CD, automated testing, monitoring and alerting.
• A board understanding of security practices such as penetration testing, threat modelling, vulnerability management, (SAST) static and (DAST) dynamic application security testing
• Understanding of Cyber security industry resources such as OWASP projects and vulnerability lists, etc. 
• Understanding of the SDLC as well as knowledge of the component of a secure SDLC
• Ability to design and implement secure coding to practice and provide guidance to development teams
• Experience in designing secure network architectures, virtualization technologies, identity and access management principles, application security, encryption technologies, DNS and web applications
• Basic knowledge with security compliance standards
• Good knowledge in payment solutions security
   

Not a perfect fit?

Worried that you don’t meet all the desired criteria exactly? At Vodafone we are passionate about Inclusion for All and creating a workplace where everyone can thrive, whatever their personal or professional background. If you’re excited about this role but your experience doesn’t align exactly with every part of the job description, we encourage you to apply as you may be the right candidate for this role or another role, and our recruitment team can help you see how your skills fit in.

What's in it for you

We want you to feel happy and fulfilled at work, without compromising the other things in life that matter to you. There are lots of ways we support this, including hybrid working and generous parental leave. You'll also get four Spirit Days a year to focus on your personal development and wellbeing, plus a host of other great benefits too.

Who we are

You may have already heard of Vodafone - We're a leading Telecommunications company in Europe and Africa. But what you might not know is that we are continuously investing in new technologies to improve the lives of millions of customers, businesses and people around the world, creating a better future for everyone.

As part of our global family, whether that's Vodafone, Vodacom or _VOIS, you'll feel a sense of pride and purpose as you contribute to our culture of innovation. We pursue equality of opportunity and inclusion for all candidates through our employment policies and practices. We recognise and celebrate the importance of diversity and inclusivity in our workspace and we do not tolerate any form of discrimination especially related to but not limited to race, colour, age, veteran status, gender identification, sexual orientation, pregnancy, ethnicity, disability, religion, political affiliation, trade union membership, nationality, indigenous status, medical condition, HIV status, social origin, cultural background, social, or marital status.

Together we can.