Nokia Security Risk Compliance Expert 

India 

582590310

• Implement and operate the global Information Security Management System (ISMS) to enhance overall security and compliance
• Conduct risk assessments with global stakeholders to evaluate and report information security risks
• Develop and maintain the information security risk register, tracking mitigation progress and presenting reports to stakeholders
• Provide recommendations for security risk mitigation strategies tailored to different business groups
• Create, update, and maintain ISMS documentation and a repository of reports and audit records
• Facilitate training sessions to educate employees on ISMS practices and promote a strong security culture
• Collaborate with cross-functional teams to identify evolving security trends and compliance requirements
• Contribute to the continuous improvement of Nokia ISMS and related tools, utilizing KPIs to measure effectiveness

You have:

• Master's or bachelor's degree in computer science, security engineering, or equivalent
• 5+ years of experience in information security in a multinational organization. Solid understanding of information security processes and technologies
• Practical knowledge of ISO/IEC 27001:2022 standard implementation
• Excellent documentation and communication skills

It would be nice if you also had:

• Knowledge of security standards like CSA CCM, NIST CSF, NIS2, and SOC2
• Experience delivering information security training
• Familiarity with RSA Archer and Microsoft Power BI or other GRC tools
• Certifications in information security (e.g., CRISC, CISSP and ISO 27001 LI/LA)

Nokia has received the following recognitions for its commitment to inclusion & equality:

• One of the World’s Most Ethical Companies by Ethisphere
• Gender-Equality Index by Bloomberg
• Workplace Pride Global Benchmark