Security Compliance Consultant - VOIS

Vodafone · Pune, Maharashtra, India · 4 months ago

Work mode: Hybrid
Experience: 12+ years

automation cism cloud itil power-platform risk-assessment

Who we are

VOIS (Vodafone Intelligent Solutions) is a strategic arm of Vodafone Group Plc, creating value for customers by delivering intelligent solutions through Talent, Technology & Transformation.
As the largest shared services organisation in the global telco industry with 30,000 FTE, our portfolio of next-generation solutions and services are designed in partnership with customers across Vodafone Group, local markets, and partner markets to simplify and drive growth. With our strategic partner Accenture, we work alongside our Vodafone customers, other Telco and tech companies to drive transformation, meet the challenges of our industry and ensure we stay relevant and resilient. This partnership is a unique, industry-first model which brings together the best of in-house and 3rd party capability.
We work with customers across 28 countries from 10 VOIS locations: Albania, Egypt, Hungary, India, Romania, Spain, Turkey, UK, Germany, Ireland, and with a network of teams in Czech Republic, Italy, Greece, and Portugal.
#VOIS #BeUnrivalled #CreateTheFuture

About this Role

We are seeking a Security Compliance Consultant (CHARM) to act as a senior authority on cyber compliance and control assurance across the organisation. This role focuses on driving enterprise-wide adoption and optimisation of CHARM security controls, ensuring alignment with Vodafone Security Baseline requirements across IT, cloud, and network environments. The individual will operate at the intersection of policy, risk, and technology, enabling proactive, risk-driven compliance and supporting audit readiness through robust assurance practices and stakeholder collaboration.

What you’ll do

• Ensure compliance with Vodafone Cyber Security Baseline requirements and the CHARM control framework, providing clear interpretation of policy intent and applicability
• Drive lifecycle management of security controls, including hardening, patching, and vulnerability management across IT, cloud, and network domains
• Oversee and enhance control assurance practices, including assessment methodologies, effectiveness reviews, and evidence validation
• Contribute to internal and external audits (e.g. Internal Audit, Group Cyber Assurance), supporting evidence preparation, remediation tracking, and clarifications
• Provide governance input for systems in development or undergoing change, ensuring alignment with baseline security requirements
• Develop, maintain, and present compliance dashboards, metrics, and trend analysis to support risk-based decision-making
• Participate in cyber risk assessments, identifying risks, defining mitigation actions, and tracking progress
• Collaborate with stakeholders across Technology, Architecture, and Service Ownership to address control gaps and prioritise remediation
• Improve compliance maturity through standardisation, automation, and continuous process optimisation

Who you are

• An experienced professional with 12+ years in Information Security Governance, Risk and Compliance (GRC), ideally within complex, multi-market environments
• Highly knowledgeable in security governance models, control frameworks, and end-to-end compliance lifecycle management
• Experienced in leading audit and assurance engagements, including regulatory and internal reviews
• Skilled in stakeholder collaboration across diverse technical and business functions
• Knowledgeable in IT service management principles (ITIL) and their integration with security controls
• Technically informed across infrastructure, operating systems, middleware, and cloud environments from a governance perspective
• Able to translate high-level security requirements into actionable compliance outcomes
• Detail-oriented, organised, and capable of managing multiple priorities simultaneously
• A confident communicator, able to engage effectively with senior stakeholders
• Fluent in spoken and written English
• Certified in CISM or an equivalent GRC-focused qualification
• Experienced in ISO/IEC 27002 (or similar standards) implementation and adaptation
• Proficient in Microsoft Office tools, including advanced Excel, and experienced in Power Platform or similar tools for dashboards and automation

Not a perfect fit?

Concerned you may not meet every requirement? Vodafone is committed to creating an inclusive workplace where everyone can thrive. If you are excited about this role but your experience does not align exactly with every aspect of the job description, you are encouraged to apply. You may be the right candidate for this or another opportunity, and the recruitment team will support you in exploring where your skills fit best.

What's in it for you

• Opportunity to influence enterprise-wide cyber security strategy and compliance maturity
• Exposure to global audit, assurance, and regulatory environments
• Collaboration with senior stakeholders across technology and security domains
• Involvement in large-scale transformation, automation, and standardisation initiatives
• A role that blends strategic thinking with practical execution in cyber risk and compliance

What skills you will learn

• Advanced cyber compliance and control assurance techniques within global frameworks
• Development and optimisation of audit-ready compliance models
• Strategic stakeholder engagement and influence across organisations
• Data-driven decision-making using advanced dashboards and reporting tools
• Continuous improvement and automation of security compliance processes

VOIS Equal Opportunity Employer Commitment

Vodafone recognises and celebrates the value of diversity in building a workforce that reflects the customers and communities it serves. No form of discrimination is tolerated. This includes, but is not limited to, discrimination based on race, colour, age, veteran status, gender identity, gender expression, sexual orientation, pregnancy, maternity or parental status, ethnicity, disability, religion or belief, political affiliation, trade union membership, nationality, citizenship, indigenous status, medical condition, HIV status, neurodiversity, social origin, cultural background, marital or civil partnership status, or socio-economic background.

Join Us

At Vodafone, we’re working hard to build a better future. A more connected, inclusive and sustainable world. As a dynamic global community, it's our human spirit, together with technology, that empowers us to achieve this.
We challenge and innovate in order to connect people, businesses, and communities across the world. Delighting our customers and earning their loyalty drive us, and we experiment, learn fast and get it done, together.
With us, you can truly be yourself and belong, share inspiration, embrace new opportunities, thrive, and make a real difference.

Alert

Apply for Vodafone jobs only through the official Vodafone Careers website to avoid job scams and fraud.
#JDEnhancedByTARA

Follow us on social media

• LinkedIn:
• Facebook:
• Instagram:
• You can also chat with our employees to learn more about our projects: