Cyber Security Operations Manager

🌍 Flexible work: 60% from home and 40% from the office, with flexible hours!

🏡 20 additional teleworking days: Work from anywhere in Spain.

🗓️ 25 vacation days: Plus enjoy December 24th and 31st off, and the option to purchase up to 10 additional days.

🩺 Free health insurance: Coverage with Adeslas, life insurance, and a comprehensive health and wellness management program, both physical and mental.

💰 Pension plan option. Secure your future with our pension plan options.

❤️ 3 volunteering days per year: Dedicate time to volunteering projects with these additional days.

🚀 Career development and training.

📲 App for digital management. Easily organize your day-to-day in the office with our app.

Security Guard Girona Costa + €2,150 net

#VodafoneSpain

As Cyber Defence Manager, you will lead Vodafone's Cyber Defence function, ensuring effective protection, detection, response, and recovery against cyber threats. You will own the strategy, governance, operation, and continuous evolution of cyber defence technologies and incident response capabilities.

You will define and drive the vision, roadmap, people, processes, and technology across Cyber Protection, Detection, and Response, ensuring resilience against evolving threats and maximizing security investment value.

• Define and execute the Cyber Defence strategy aligned with Vodafone's Cyber Security objectives.
• Own the roadmap, lifecycle, and operational effectiveness of Cyber Defence technologies.
• Lead teams responsible for security controls, detection platforms, and incident response.
• Enhance, automate, and integrate security technologies, including SIEM, SOAR, EDR/XDR, NDR, Email Security, Threat Intelligence, and Security Analytics.
• Establish governance frameworks to ensure platforms remain resilient, scalable, and cost-effective.
• Define investment priorities and capability roadmaps to address emerging threats, business transformation, and regulatory requirements.
• Ensure optimal operation, maintenance, tuning, and performance of Cyber Defence platforms.
• Collaborate with Security Architecture and Engineering teams to evolve protection and monitoring capabilities across on-premises, cloud, network, and endpoint environments.
• Identify capability gaps and lead transformation initiatives to strengthen preventive, detective, and responsive controls.
• Drive automation and orchestration to improve efficiency, response times, and security effectiveness.
• Manage vendor relationships, contracts, technology performance, and managed security services.
• Monitor platform health, KPIs, effectiveness metrics, coverage indicators, and maturity levels.
• Ensure adequate visibility, protection, and response across critical business services and assets.
• Lead innovation initiatives and assess emerging security technologies.
• Lead and develop the Cyber Defence Incident Response team.
• Act as Incident Commander during major cyber incidents and crisis situations.
• Coordinate response activities across Cyber Security, Technology, Legal, Privacy, Risk, Compliance, and Business teams.
• Establish and maintain incident response governance, standards, processes, and procedures.
• Ensure preparedness, containment, eradication, recovery, and response effectiveness.
• Drive continuous improvement through lessons learned and root cause analysis.
• Manage relationships with external partners, incident response providers, regulators, and law enforcement.
• Maintain incident response playbooks, crisis plans, and escalation procedures.
• Foster a high-performance culture focused on security excellence, innovation, and continuous learning.

• Bachelor's degree in Computer Science, Cyber Security, Engineering, or a related discipline.
• Advanced Cyber Security certification (CISSP, CISM, GIAC certifications, CRISC, or equivalent) is highly desirable.
• Certifications in Incident Response, Digital Forensics, Cloud Security, or Security Operations are advantageous.
• +10 years of experience in Cyber Security
• Strong understanding of Incident Response frameworks, MITRE ATT&CK, NIST, and cyber crisis management best practices.
• Strong leadership, people management, and stakeholder engagement skills.
• Ability to communicate effectively with both technical and executive audiences.
• Experience managing vendors, third parties, and service providers.
• Telecommunications industry experience is an advantage.
• Strong analytical, decision-making, and risk management capabilities.
• Ability to operate effectively in high-pressure environments and make critical decisions during cyber crises.
• Excellent verbal and written communication skills.
• Excellent level of English, both written and spoken.