Architect Platform Security

Select how often (in days) to receive an alert:
Business Area: VT Netw. Strategy Archit. Eng.
Posting Country: Portugal
Full Time / Part Time: Full Time
Contract Type: Permanent
At Vodafone, we're working hard to build a better future. A more connected, inclusive and sustainable world. As a dynamic global community, it's our human spirit, together with technology, that empowers us to achieve this.
We challenge and innovate in order to connect people, businesses, and communities across the world. Delighting our customers and earning their loyalty drive us, and we experiment, learn fast and get it done, together.
With us, you can be truly be yourself and belong, share inspiration, embrace new opportunities, thrive, and make a real difference.
Join Us
At Vodafone, we're not just shaping the future of connectivity for our customers - we're shaping the future for everyone who joins our team. When you work with us, you're part of a global mission to connect people, solve complex challenges, and create a sustainable and more inclusive world. If you want to grow your career whilst finding the perfect balance between work and life, Vodafone offers the opportunities to help you belong and make a real impact.
The Architect Platform Security is the security subject matter expert within the Vodafone TV Architecture team. The role ensures that security requirements, risk assessments, approvals and governance activities are embedded throughout the design and delivery lifecycle of Vodafone TV products and services.
Acting as the bridge between Vodafone TV project teams and Vodafone Group Security functions, the architect coordinates security, privacy, supplier security and assurance activities so that required decisions and approvals are obtained in time and do not become late delivery blockers.
What you'll do
Security architecture and governance:
Act as the security authority and trusted advisor for the Vodafone TV platform ecosystem.
Define, maintain and promote secure architecture principles, standards and best practices.
Provide security guidance during solution design, architecture reviews and project delivery.
Ensure security is considered early and remains aligned with relevant Vodafone policies and standards.
Group Security interface and approvals:
Serve as the primary interface between Vodafone TV and Vodafone Group Security functions.
Coordinate cyber security, supplier security, penetration testing, privacy, legal and compliance activities.
Ensure required assessments, security memos, exceptions and governance approvals are planned, tracked and completed before production deployment.
Proactively manage dependencies, timelines, risks and escalations with project stakeholders.
Project and delivery assurance:
Work closely with architects, engineering teams, product owners, programme managers, operations and external suppliers throughout the delivery lifecycle.
Translate security requirements into clear, actionable expectations for project teams and delivery plans.
Identify security risks early, provide pragmatic mitigation guidance and track findings through closure.
Support delivery teams during design, implementation, testing, release readiness and go-live activities.
Vodafone TV security posture:
Maintain a current view of the security posture across Vodafone TV platforms, services, applications and suppliers.
Drive consistent security documentation and applicability assessments across backend services, client applications, cloud infrastructure, data platforms and third-party solutions.
Facilitate security workshops, architecture reviews and knowledge‐sharing sessions.
Monitor emerging threats and industry practices relevant to TV, OTT, media and digital platforms.
Who you are
Degree in Computer Science, Cyber Security, Information Technology, Engineering or a comparable discipline is desirable. Relevant professional security and architecture certifications are highly desirable.
Extensive experience in cyber security architecture, security assurance, risk management or security governance within a complex enterprise environment.
Strong understanding of secure‐by‐design principles, secure software development lifecycle and DevSecOps practices.
Practical knowledge of cloud, application, API, microservices, container, identity and infrastructure security.
Experience coordinating threat modelling, risk assessments, vulnerability assessments, penetration testing and remediation activities.
Experience with third‐party and supplier security assessments, privacy and compliance governance.
Ability to influence across architecture, engineering, product, programme and security organizations without direct authority.
Excellent stakeholder management, communication and facilitation skills, with the ability to translate security risk into clear delivery actions.