Specialist Technical Engineer SAS Lead

About this Role

Design the right cyber security architecture for VOLT (DNO) ecosystem.

To constantly keep adding up solutions and knowledge to reduce our risks within the challenging cyber landscape.

Advising and introducing security requirements in DNO internal and external systems, projects or products for VOLT Leads the project team in the phases L0-G2 related to Secure Access Solutions.

Coordinates the translation & translates business demand into technical requirements and identification of the affected areas Checks feasibility of demands with related to business needs Efficient control and steer of internal and external suppliers, alignment of vendor’s product roadmap with Vodafone’s businesses & domain's strategy

• Defining security controls and ensuring that the controls are in place
• Designing and implementing security solutions for the benefit of the systems with the relevant products and/or configurations and reduce the security risk.
• Supporting to maintain the secure software development lifecycle (LCM) and follow & report all vulnerabilities to the relevant teams, ensure the remediations take place in accordance with the SLA.
• Attending internal and external audits and preparing evidence when required
• Able to take initiative and make architectural decisions through designing secure solutions to enable the business, especially in critical/high risk situations and reduce the company’s cyber risks.
• Deployment of the solutions (e.g., on virtual infrastructure, providing connectivity) and integration into the OSS architecture (e.g. Identity and security management solutions, UAM)
• Coordination of teams and control of end-to-end delivery within time and budget
• Accountable to manage the entire lifecycle of the systems and solutions in area of accountability, including identification of technical synergy potentials and derivation of recommendations for action.
• Selects and coordinates external suppliers for the design, development and implementation phase and effective control and steer of those suppliers.
• Continuous alignment of business strategies with solution & product roadmap and active consultancy of business stakeholders

• Design concepts to ensure that the security controls are compliance and lifecycle management
• Solution designs to eneble the business and reduce the cyber risks.
• Delivery of requirement definition, RfQ and solution design documents
• Delivery remediation about risk assessments or vulnerabilities.
• Delivery plan for audits action
• On time delivery within approved budget for all projects concerning systems in scope
• Timely accurate reporting of all regional projects; prevent roadblocks by early identifying and raising issues
• Contributes with knowledge to the further development of the architectural framework and guidelines.
• Close collaboration with the Design Authorities across domains as well as with E2E Design Authority and Group Cyber Security to ensure solutions' compliance with design guidelines and principle

Core competencies, knowledge and experience:

• Very good knowledge of OSS / BSS architecture and solutions
• Strong knowledge on IT security controls and on Log Management systems
• Knowledge on User Access Management systems
• Having worked in several security domains or security operation tools
• Knowledge on OS, DB, Microsoft systems and hardening baselines
• Long term experience in the engineering of Identity and Access Management (e.g., Sailpoint, Oracle), Remote vendor Access solutions (e.g., Citrix, ZTNA, MAVD) and security solutions to manage hardening and vulnerabilities in OSS (e.g., tripwire, SIEM, EDR, MFA, AV)
• Very good knowledge of process & project management methodologies (e.g., Prince2)
• Strong stakeholder management and excellent…