Security Architect - Cyber Security

Vodafone

Dublin, Ireland

Role Purpose:

The Security Architect within the Vodafone Ireland Cyber Security team plays a cross-functional role, supporting development by defining security-related requirements and providing security guidance to the project teams. The Security Architect collaborates with stakeholders to implement Secure by Design processes, reviews documentation, advises local projects from a security perspective, and manages associated Cyber Security risks. Acting as a Subject Matter Expert, the Security Architect provides guidance across the organisation and to Vodafone Group projects, while also supporting local Secure by Design initiatives.

Essence of Role – Key Accountabilities:

Build productive working relationships and collaborate with the wider Technology team and relevant business units to document and maintain the Security Architecture. Support business units in understanding, applying, and enforcing security controls for both new and existing solutions, products, and modules;
Participate in early-stage project planning to ensure that appropriate security controls are implemented, in line with local legislation, regulations and with Group Cyber Security Policies and Standards;
Assess the impact of new and updated Group Cyber Security Policies and Standards on the local organisation;
Represent Technology Security during project sizing sessions and gate reviews. Provide high-level estimates of effort (time and cost), and ensure that estimates, security testing, and acceptance criteria are agreed upon, documented, and met;
Act as an internal security consultant by advising and influencing business and technical stakeholders. Provide security assurance, guidance, and support for projects at both the requirements and architecture levels;
Influence solution design by defining security requirements and ensuring implementations meet established security standards;
Design solution architectures for security-related initiatives and broader projects across the organisation;
Provide architectural guidance for secure software development, integration, and testing activities;
Conduct risk assessments based on identified vulnerabilities and issues across the organisation or as part of the Secure by Design process;
Guide local technology teams through compliance processes related to standards and frameworks such as NIST, ISO 27000, PCI-DSS, etc.;
Ensure a consistent approach to managing security interdependencies across multiple projects and workstreams;
Lead by example within the Vodafone Ireland Cyber Security Secure by Design team, supporting team members and external contractors;
Be available for 24/7 on-call support as an escalation point for security incidents, when required;
Promote a culture of continuous improvement to reduce inefficiencies and enhance security practices.

We Are Looking For You, If You Have:

Bachelor/Master of Science degree in Computer Science, Engineering, Telecommunications or another related technical degree (relevant professional certificates are an advantage, e.g. TOGAF, ITIL, ISO27000 LA/LI, (ISC)2 CISSP, CCSP, ISACA CISM/CISA/CRISC);
8+ years IT Security Engineering/Architecture/Consultancy experience;
Excellent knowledge of IT Security technologies;
In-depth knowledge of system development life cycle, security standards (ISO27000, OWASP, NIST etc.), system hardening, network security;
Solid knowledge of telecom systems, networks, protocols and processes (e.g. billing, mediation, provisioning, signalling, VoIP etc.);
Solid vendor management experience, proven experience managing complex integration issues across multiple vendors with very good analytical and reporting skills;
Aptitude for assessing Security related issues and requirements from both a business and Information Security perspective with the ability to effectively address both technical and non-technical audiences;
Leading a team of experts and providing guidance to team members;
Familiar with the laws, regulations, industry standards and guidance pertaining to Data Protection, Information Security and the Telecommunication industry;
Excellent communication skills with the ability to articulate complex technical issues in simple terms, and to provide accurate and user-friendly reports and documentation;
A team player with diplomacy and advocacy skills and the ability to quickly adapt to ongoing environment changes (infrastructure, organisation, priorities).