Hardening Compliance Specialist / Cyber Security Risk & Compliance Specialist

We're seeking a dynamic professional for "Hardening Compliance Specialist" role based in Pune. If you're ready to make an impact, this could be the perfect fit!

Experience : 6 to 12 years

Location : Pune

Working Persona : Hybrid (8 days in a month)

Professional Skills / Certifications :

ISO2700 LA / LI, CISA, or CISM mandatory

Any other training or certification like CRISC, GDPR, SOX, COBIT, PCI-DSS, TISAX, DevSecOps will be an added advantage.

Role purpose :

As the Cyber Compliance Specialist, you will act as a point of contact and support for the Vodafone Group entities for implementation of cyber security controls as defined in the Vodafone Security control framework. You will play a critical role in ensuring robust cyber governance and embedding security into business operations, as well as supporting strategic initiatives across the organisation.

This role involves close collaboration with internal stakeholders in Cyber Security and in Technology departments in order to manage cyber risks, drive compliance, and promote security compliance.

This role involves close collaboration with internal stakeholders in Cyber Security and in Technology departments in order to manage cyber risks, drive compliance, and promote security compliance.

In this role, you will be working hand in hand with the Vodafone Global Cyber teams and work in close collaboration with internal stakeholder. Your accountabilities are to :

• Drive and support the design of the Compliance program at all levels : strategical, tactical and operational.
• Ensure the minimum Cyber Security Baseline Requirement as per the internal standards are met.
• Perform and support control assessments, regular checks and audits to ensure control effectiveness throughout the year. This will include Security and Continuity testing activities on systems and resources.
• Direct and perform reviews of internal control procedures and security for systems under development and / or enhancements to current system
• Provide input to maintain and improve Security compliance in strict alignment with other strategic Vodafone programs.
• Actively participate in Risk Assessments activities, including discovery and analysis of data.
• Support the development of delivery plans, documenting requirements and deliverables and agreeing approaches (e.g. for assessing Risks, BIA) in coordination with other functions such as Risk Management.
• Provide periodical or on-demand reports for Vodafone stakeholders.

Key responsibilities :