Security Risk Index - Lead

As a Security Risk Index - Lead, you will contribute to security assessments, risk indexing, and various global cyber security standards and frameworks viz ISO 27000, GDPR, NIS2, NIST, HIPAA, TSA, SOC2, ITU-T, 3GPP, CSA - CCM, ITIL, etc.

HOW YOU WILL CONTRIBUTE AND WHAT YOU WILL LEARN

• You need to identify potential threats, vulnerabilities, and attack vectors, analyzing their impact on network operations and services.
• You are evaluating the effectiveness of existing security controls and recommend appropriate countermeasures for the network.
• You need to understand security requirements and develop tailored risk mitigation strategies for the telecom network.
• You need to ensure compliance with industry best practices, regulatory requirements, and Nokia's internal security guidelines specifically for the telecom network.
• You will assess the effectiveness of existing security controls and identify areas for improvement within the telecom network.
• You need to provide technical expertise and guidance related to security incidents affecting the telecom network.
• You need to do tailor training programs to the specific needs of personnel involved in managing and operating the telecom network.

KEY SKILLS AND EXPERIENCE

You Have:

• Bachelor's degree in computer science, Information Security, or Electrical Engineering, with a minimum of 10-15 years of experience in security risk assessment, vulnerability management, or a related field within the telecom industry.
• Experience in security principles, methodologies, and best practices specifically relevant to telecom networks.
• Experience with security frameworks such as ISO 27001, NIST Cybersecurity Framework, or similar, with a focus on their application to telecom networks.
• Experience in conducting threat modeling, vulnerability analysis, and impact assessments for telecom network infrastructure.
• Experience with network security technologies such as firewalls, intrusion detection systems, VPNs, and network segmentation.
• Familiarity with telecom protocols and standards (e.g., SS7, Diameter, SIP) and their security implications.

It would be nice if you also had:

• Certifications - ISO 270001 LA/LI, CISA , ITIL V3/4.
• Exposure to complex problem-solving and manage multiple projects simultaneously.