Job
Description
As a Security Risk Index - Lead, you will contribute to security assessments, risk indexing, and various global cyber security standards and frameworks viz ISO 27000, GDPR, NIS2, NIST, HIPAA, TSA, SOC2, ITU-T, 3GPP, CSA - CCM, ITIL, etc. You Have: Bachelors degree in Computer Science, Information Security, or Electrical Engineering, with a minimum of 10-15 years of experience in security risk assessment, vulnerability management, or a related field within the telecom industry. Experience in security principles, methodologies, and best practices specifically relevant to telecom networks. Experience with security frameworks such as ISO 27001, NIST Cybersecurity Framework, or similar, with a focus on their application to telecom networks. Experience in conducting threat modeling, vulnerability analysis, and impact assessments for telecom network infrastructure. Experience with network security technologies such as firewalls, intrusion detection systems, VPNs, and network segmentation. Familiarity with telecom protocols and standards (e.g., SS7, Diameter, SIP) and their security implications. It would be nice if you also had: Certifications - ISO 270001 LA/LI, CISA , ITIL V3/4. Exposure to complex problem-solving and manage multiple projects simultaneously. You need to identify potential threats, vulnerabilities, and attack vectors, analyzing their impact on network operations and services. You are evaluating the effectiveness of existing security controls and recommend appropriate countermeasures for the network. You need to understand security requirements and develop tailored risk mitigation strategies for the telecom network. You need to ensure compliance with industry best practices, regulatory requirements, and Nokias internal security guidelines specifically for the telecom network. You will assess the effectiveness of existing security controls and identify areas for improvement within the telecom network. You need to provide technical expertise and guidance related to security incidents affecting the telecom network. You need to do tailor training programs to the specific needs of personnel involved in managing and operating the telecom network.
