Supplier Cyber Security Consultant

About the role

We are seeking a Secure by Supplier Cyber Security Consultant to help embed secure-by-design principles into supplier engagements from the earliest stages of the supplier lifecycle. This role focuses on identifying, assessing and mitigating cyber security and regulatory risks associated with third-party suppliers, while ensuring compliance with UK Telecom Security Regulations and Vodafone’s internal security standards.

What you'll do

• Perform technical assessments of supplier security capabilities and regulatory compliance during supplier sourcing and contracting activities
• Evaluate security and compliance risks using a standardised assessment methodology and identify effective mitigation measures
• Provide security recommendations to support supplier selection and sourcing decisions
• Engage with external suppliers to understand, validate and influence their security and regulatory compliance positions
• Collaborate with internal subject matter experts and stakeholders to verify supplier security positions and support effective decision-making

What you need

• 5–9 yrs of experience
• Network security
• Cloud security
• IAM
• Penetration testing
• CISSP
• CISM
• Any graduate

Good to have

• CISA
• ISO 27001
• Firewalls
• Telecom
• IoT