Privacy & Security Manager

The security and privacy manager will be responsible for coordination of implementation and maintenance of security controls in accordance with corporate policies and programs, including mitigation information security risks in accordance with Nokia’s cyber security standards.

Responsibilities

• Document assessment results to define mitigation actions to reduce the risk to an acceptable level
• Collaborate with services delivery teams to integrate security good practices and threat modelling into the software development lifecycle, continuously improve security testing methodologies, processes
• Collaborate with MN teams to ensure compliance with industry standards (National Security Agreement, ISO 27001, NIST, CRA, GDPR, etc.).
• Ensure appropriate communication of policies, standards, and processes are regularly occurring throughout the enterprise.
• Develop and iterate security baseline, best practices, processes and security documentation
• Support corporate special security programs (e.g. Special Information Protection)
• Participate in management meetings to influence application and infrastructure roadmap for security
• Identify key issues with security for customer contracts and translate to controls which need to be implemented
• Validate security posture of data processing solutions provided by external vendors (e.g. 3rd part software, SaaS, IaaS)

Qualifications

Must-Have

• Bachelors/master’s degree in computer science, network security, engineering or equivalent with Minimum 5 to 10 Yrs experience in managerial cyber/information security position
• Knowledge of current communications industry, cyber security, IP networks, system engineering quality/security standards and ISO, NIST, SOC frameworks.
• Knowledge of TCP/IP services/protocols (especially “http”), networking, emerging technology trends and system integration and SO27001 – very good understating and practical implementation experience in standard implementation and audits.
• Security certifications (ISO27001 implementer/auditor, CISA, CISSP)
• Experience working with service providers, enterprise/IT or other Nokia customers and with Nokia service delivery organization

Nice-To-Have

• Basic knowledge of configuration security mechanisms in modern OS, DBs

• Good understanding genesis of most common security variabilities in applications (preferable knowledge about Top Ten Risk by OWASP), infra, cloud solution

• Knowledge related with planning and execution application security scans, planning remediation actions and coordination of mitigations implementation

• ITIL Information Security area good knowing

About Us

Advancing connectivity to secure a brighter world.

Nokia is a global leader in connectivity for the AI era. With expertise across fixed, mobile and transport networks, powered by the innovation of Nokia Bell Labs, we’re advancing connectivity to secure a brighter world.

Learn more about life at Nokia.

Our recruitment process

We act inclusively and respect the uniqueness of people. Our employment decisions are made regardless of race, color, national or ethnic origin, religion, gender, sexual orientation, gender identity or expression, age, marital status, disability, protected veteran status or other characteristics protected by law. We are committed to a culture of inclusion built upon our core value of respect.

If you’re interested in this role but don’t meet every listed requirement, we still encourage you to apply. Unique backgrounds, perspectives, and experiences enrich our teams, and you may be just the right candidate for this or another opportunity.

The length of the recruitment process may vary depending on the specific role's requirements. We strive to ensure a smooth and inclusive experience for all candidates. Discover more about the recruitment process at Nokia.