Security Compliance Expert

at  Nokia

The Strategy & Technology function lays the path for Nokia’s future technology innovation and identifies the most promising areas for Nokia to create new value. We set the company’s strategy and technology vision, offer an unparalleled research foundation for innovation, and provide critical support infrastructure for Nokia.
You will be part of Group Security team within Strategy & Technology. We own Nokia-wide security policies, programs, management testing and reporting. We partner with various stakeholders to identify security requirements, trends and evolving risks, and act as an advisor to our customers, Business Groups, and other stakeholders in various security related matters. These include Nokia’s security culture, processes, systems, products, and services to position Nokia as a trusted partner for 5G era and beyond.

One consequence of the growing threats posed with digitalization and the surge in cyber-attacks is the increasing number of regulations. One of the latest examples is the NIS2 Directive which aims to improve the level of cyber security across the EU. We are now looking for a Security Compliance Expert who can strengthen our oversight of the regulatory compliance (including NIS2) within Nokia services.

• Lead global security program(s) to implement regulatory requirements across Nokia
• Ensure the program meets its targets, manage interdependencies and risks, and provide oversight on its purpose and status
• Coordinate regulatory compliance activities with related security and services projects
• Support business teams to understand and meet their security regulatory requirements
• Participate in monitoring and influencing on upcoming regulations
• Develop further Nokia’s regulatory compliance management practices
• Actively contribute to the development of Nokia’s Service Security.
• 7+ years of experience in information security and/or related functions
• Strong project and program management skills in a large multinational organization
• Knowledge of information security regulations and EU directives, such as NIS2
• Practical knowledge of ISO/IEC 27001 standard
• Ability to manage complex internal and external networks
• Excellent communication skills in diverse and complex environments
• Excellent documentation and reporting skills for management communication
• Fluency in Finnish or Swedish, as well as English
• Education: master’s or bachelor’s degree in computer science, security engineering or equivalent.
• Nice to have: experience with telecommunications industry and certifications in information security and/or project management

Please refer the Job description for details