Cyber Defence Manager

As Cyber Defence Manager, you will lead Vodafone’s Cyber Defence function, ensuring effective protection, detection, response, and recovery against cyber threats. You will own the strategy, governance, operation, and continuous evolution of cyber defence technologies and incident response capabilities.

You will define and drive the vision, roadmap, people, processes, and technology across Cyber Protection, Detection, and Response, ensuring resilience against evolving threats and maximizing security investment value.

Key responsibilities:

• Define and execute the Cyber Defence strategy aligned with Vodafone’s Cyber Security objectives.
• Own the roadmap, lifecycle, and operational effectiveness of Cyber Defence technologies.
• Lead teams responsible for security controls, detection platforms, and incident response.
• Enhance, automate, and integrate security technologies, including SIEM, SOAR, EDR/XDR, NDR, Email Security, Threat Intelligence, and Security Analytics.
• Establish governance frameworks to ensure platforms remain resilient, scalable, and cost-effective.
• Define investment priorities and capability roadmaps to address emerging threats, business transformation, and regulatory requirements.
• Ensure optimal operation, maintenance, tuning, and performance of Cyber Defence platforms.
• Collaborate with Security Architecture and Engineering teams to evolve protection and monitoring capabilities across on-premises, cloud, network, and endpoint environments.
• Identify capability gaps and lead transformation initiatives to strengthen preventive, detective, and responsive controls.
• Drive automation and orchestration to improve efficiency, response times, and security effectiveness.
• Manage vendor relationships, contracts, technology performance, and managed security services.
• Monitor platform health, KPIs, effectiveness metrics, coverage indicators, and maturity levels.
• Ensure adequate visibility, protection, and response across critical business services and assets.
• Lead innovation initiatives and assess emerging security technologies.
• Lead and develop the Cyber Defence Incident Response team.
• Act as Incident Commander during major cyber incidents and crisis situations.
• Coordinate response activities across Cyber Security, Technology, Legal, Privacy, Risk, Compliance, and Business teams.
• Establish and maintain incident response governance, standards, processes, and procedures.
• Ensure preparedness, containment, eradication, recovery, and response effectiveness.
• Drive continuous improvement through lessons learned and root cause analysis.
• Manage relationships with external partners, incident response providers, regulators, and law enforcement.
• Maintain incident response playbooks, crisis plans, and escalation procedures.
• Foster a high-performance culture focused on security excellence, innovation, and continuous learning.

🌍 Flexible work: 60% from home and 40% from the office, with flexible hours!

🏡 20 additional remote work days: Work from anywhere in Spain.

🗓️ 25 vacation days: Plus, enjoy December 24th and 31st off, and you have the option to purchase up to 10 additional days.

🩺 Free health insurance: Coverage with Adeslas, life insurance, and a comprehensive health and wellness management program, both physical and mental.

💰 Pension plan option. Secure your future with our pension plan options.

❤️ 3 volunteer days per year: Dedicate time to volunteering projects with these additional days.

🚀 Career development and training: Access to a skill development platform based on Artificial Intelligence and learning content from Skillsoft, MIT Horizon, Harvard, and more.

📲 App for digital management. Organize your daily office life easily with our app.

If you want to get to know us better, visit our website and discover what life at Vodafone would be like: https://www.vodafone.es/c/conocenos/es/vodafone-espana/trabaja-con-nosotros/ 

#VodafoneSpain

On-site

D.Cyber Defence

• Bachelor's degree in Computer Science, Cyber Security, Engineering, or a related discipline.
• Advanced Cyber Security certification (CISSP, CISM, GIAC certifications, CRISC, or equivalent) is highly desirable.
• Certifications in Incident Response, Digital Forensics, Cloud Security, or Security Operations are advantageous.
• +10 years of experience in Cyber Security
• Strong understanding of Incident Response frameworks, MITRE ATT&CK, NIST, and cyber crisis management best practices.
• Strong leadership, people management, and stakeholder engagement skills.
• Ability to communicate effectively with both technical and executive audiences.
• Experience managing vendors, third parties, and service providers.
• Telecommunications industry experience is an advantage.
• Strong analytical, decision-making, and risk management capabilities.
• Ability to operate effectively in high-pressure environments and make critical decisions during cyber crises.
• Excellent verbal and written communication skills.
• Excellent level of English, both written and spoken.

As Cyber Defence Manager, you will lead Vodafone’s Cyber Defence function, ensuring effective protection, detection, response, and recovery against cyber threats. You will own the strategy, governance, operation, and continuous evolution of cyber defence technologies and incident response capabilities.

You will define and drive the vision, roadmap, people, processes, and technology across Cyber Protection, Detection, and Response, ensuring resilience against evolving threats and maximizing security investment value.

Key responsibilities:

• Define and execute the Cyber Defence strategy aligned with Vodafone’s Cyber Security objectives.
• Own the roadmap, lifecycle, and operational effectiveness of Cyber Defence technologies.
• Lead teams responsible for security controls, detection platforms, and incident response.
• Enhance, automate, and integrate security technologies, including SIEM, SOAR, EDR/XDR, NDR, Email Security, Threat Intelligence, and Security Analytics.
• Establish governance frameworks to ensure platforms remain resilient, scalable, and cost-effective.
• Define investment priorities and capability roadmaps to address emerging threats, business transformation, and regulatory requirements.
• Ensure optimal operation, maintenance, tuning, and performance of Cyber Defence platforms.
• Collaborate with Security Architecture and Engineering teams to evolve protection and monitoring capabilities across on-premises, cloud, network, and endpoint environments.
• Identify capability gaps and lead transformation initiatives to strengthen preventive, detective, and responsive controls.
• Drive automation and orchestration to improve efficiency, response times, and security effectiveness.
• Manage vendor relationships, contracts, technology performance, and managed security services.
• Monitor platform health, KPIs, effectiveness metrics, coverage indicators, and maturity levels.
• Ensure adequate visibility, protection, and response across critical business services and assets.
• Lead innovation initiatives and assess emerging security technologies.
• Lead and develop the Cyber Defence Incident Response team.
• Act as Incident Commander during major cyber incidents and crisis situations.
• Coordinate response activities across Cyber Security, Technology, Legal, Privacy, Risk, Compliance, and Business teams.
• Establish and maintain incident response governance, standards, processes, and procedures.
• Ensure preparedness, containment, eradication, recovery, and response effectiveness.
• Drive continuous improvement through lessons learned and root cause analysis.
• Manage relationships with external partners, incident response providers, regulators, and law enforcement.
• Maintain incident response playbooks, crisis plans, and escalation procedures.
• Foster a high-performance culture focused on security excellence, innovation, and continuous learning.

🌍 Trabajo flexible: 60% desde casa y 40% desde la oficina, ¡con horario flexible!

🏡 20 días adicionales de teletrabajo: Trabaja desde cualquier punto de España.

🗓️ 25 días de vacaciones: Además, disfruta de los días 24 y 31 de diciembre libres, y tienes la opción de comprar hasta 10 días adicionales.

🩺 Seguro de salud gratuito: Cobertura con Adeslas, seguro de vida y un programa integral de gestión de cuidado de la salud y bienestar, tanto físico como mental.

💰 Opción de plan de pensiones. Asegura tu futuro con nuestras opciones de plan de pensiones.

❤️ 3 día de voluntariado al año: Dedica tiempo a proyectos de voluntariado con estos días adicionales.

🚀 Desarrollo de carrera y formación: Acceso a una plataforma de desarrollo de habilidades basada en Inteligencia Artificial y contenidos de aprendizaje de Skillsoft, MIT Horizon, Harvard y más.

📲 App para la gestión digital. Organiza tu día a día en la oficina de manera sencilla con nuestra app.

Si quieres conocernos mejor, entra en nuestra web y descubre cómo sería la vida trabajando en Vodafone: https://www.vodafone.es/c/conocenos/es/vodafone-espana/trabaja-con-nosotros/ 

#VodafoneSpain

on-site

D.Cyber Defence

• Bachelor's degree in Computer Science, Cyber Security, Engineering, or a related discipline.
• Advanced Cyber Security certification (CISSP, CISM, GIAC certifications, CRISC, or equivalent) is highly desirable.
• Certifications in Incident Response, Digital Forensics, Cloud Security, or Security Operations are advantageous.
• +10 years of experience in Cyber Security
• Strong understanding of Incident Response frameworks, MITRE ATT&CK, NIST, and cyber crisis management best practices.
• Strong leadership, people management, and stakeholder engagement skills.
• Ability to communicate effectively with both technical and executive audiences.
• Experience managing vendors, third parties, and service providers.
• Telecommunications industry experience is an advantage.
• Strong analytical, decision-making, and risk management capabilities.
• Ability to operate effectively in high-pressure environments and make critical decisions during cyber crises.
• Excellent verbal and written communication skills.
• Excellent level of English, both written and spoken.