Our team:Role Title: Technology Resilience Assurance Specialist
Reporting to Technology Resilience Assurance Manager
Location: NewburyOur Team: Strategy, R&D and Assurance (SRA)The Strategy, R&D and Assurance team within Group Technology are responsible for creating and guiding Vodafone's technology strategy as well as exploring new technologies working closely with partners, vendors, Group functions and Local Markets.
SRA are also responsible for identifying and assuring key technology risks across all local markets and group entities, ensuring policies and controls are being implemented and adhered to. The SRA team produce board level reporting for technology risks.Role purpose
The 2nd Line Assurance function will be responsible for monitoring and mitigating key technology risks, driving a risk awareness culture and promoting a risk-sensitive approach to processes, architectures, applications and platforms within Technology.The key technology risks currently in scope are Cyber Security, Technology Resilience, IT Transformation, Shadow IT and Lifecycle Management. We monitor risk by working closely with local markets and Group functions; testing key controls established in our policies. We mitigate risk by identifying corrective actions and reporting to key stakeholders, including the Technology leadership team and various board committees.The assurance specialist will be required to shape and drive the technology resilience program in all our markets and group functions while supporting financials and related controls. This role requires a high calibre individual with a strong growing strategy mind-set and understanding of technology architectures and its evolutions. The candidate will interact with local markets and Group entities for different domains such as Mobile, fixed, IT, IoT etc.. The role also requires that you asses, evolve and implement continuous improvement to the Vodafone resilience program, process and culture. This is role is expected to have 10% travel time.With us, you will:Transform the way that Vodafone manages technology Resilience risk, so that we achieve the risk tolerance targets as set by the BoardPerform risk management/assurance/compliance reviews/controls testing across Vodafone Technology (Network and IT) to determine high areas of risk, working closely with local markets.Understand and support the resilience KPI's, capabilities, methodologies and strategyIdentify areas of business pain and risks while providing mitigations and corrective actions where possibleWork with markets and group functions in advising how to introduce best process and methodologies to reduce the loss of technology failures.Understand the architectures/solutions to lower risks and increase technology resilience including best practises sharing and methodologiesSupport the business continuity process and proceduresExecute part of the governance for Vodafone's key technology risks up to Board level, including reporting to and managing senior stakeholders.Perform analysis on Vodafone technology to determine high areas of riskSupport the design of the end-to-end assurance strategy.Investigate and implement automated testing where possibleApply if you have:Experience of large IT or Network delivery programmes.Experience in IT audit including application audits, general control reviews and/or data analyticsTechnology assurance, compliance or risk management experience (managing reviews and reporting findings)Experience with developing, implementing and testing risk, policies and controls.Strong stakeholder management skills, documentation and presentation skillsThe ability to grasp technical concepts rapidly and to articulate these concepts to technical and non-technical audiencesAnalytical thinking capabilities and are able to manage complex detail without losing sight of the big pictureAt least one risk, audit, or governance certification e.g. CISA, CRISK, CGEIT or equivalentA fluency of the English language both written and spokenWe are happy if you have:A technical degreeKnowledge of relevant Frameworks (e.g. SOX, ISO 27001/27002, COBIT, etc)Technical/Infrastructure knowledge i.e. detailed knowledge of some of the following platforms:
Applications (CRM, HR)Operating Systems(LINUX, Windows)IT Networks, Firewalls, VPNsDatabases (SQL, Oracle, MySQL etc)GSM Network InfrastructureTelecommunications experience#groupresourcing