Information Security Manager

Job Description

We are looking to add a new member to Nokia DA Security Team to identify and manage information security risks across all departments involved in providing our service. Our NDAC and MXIE platforms are used to provide a service for private mobile 4G/5G networks, WiFi networks, and relevant applications. They are built on top of cutting-edge technologies, Linux containers, Kubernetes (K8s), and a huge variety of various contemporary infrastructure applications and services. You Have: A Bachelor s degree and 5+ years of relevant experience in information security. Knowledge of GRC tools, processes, and techniques. Familiarity with SOC 2, NIST RMF, Cloud Security Alliance, and other cybersecurity standards. Experience with 3GPP communication networks and cloud operations. Proficiency in IT and customer service tools (e.g., Zendesk, Service NOW). Expertise in risk assessment and treatment within the scope of an ISMS (ISO 27001, ISO 27002, ISO 27005). It would be nice if you also had: Strong communication and stakeholder management skills. Security or other professional certifications (e.g., CISSP, CISM, ITIL). Provide expertise for information security risk management and compliance standards such as ISO 27k and SOC2. Identify Information Security assets across in all departments of an organization providing a SaaS service from a cloud including e.g. care, R&D, operations, business IT functions. Conduct information security risk assessments and efficiently communicate identified risks to relevant stakeholders. Facilitate risk treatment planning, follow-up on implementation, prepare and communicate KPIs to management. Lead continuously improvement of security risk management tools and techniques used in our organization, in close collaboration with other cybersecurity experts in our team and Nokia Group Security. Collaborate with Nokia Group Security to efficiently integrate our Risk Management efforts into the corporate ISMS framework.