Compliance Assessor

Nokia; India; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Nokia IT Security group seeks an experienced IT SOX Compliance professional to manage risk posture and ensure enterprise-wide adherence to IT SOX requirements. The role sits within the Information Security organization and collaborates across IT operations, governance, and finance teams.

The candidate will establish and monitor control frameworks, assess technology risks, and provide expert guidance on SOX controls. Strong English communication and cross-functional collaboration are essential.

Qualifications

• Undergraduate degree in information systems or computer science; 6+ years of experience; Big 4 audit experience a plus
• In-depth knowledge of IT SOX requirements and IT processes, applications, and infrastructure
• Experience assessing technology risks and controls across access management, change management, and operations
• CISA, CISSP certifications are preferred

Responsibilities

• Track Nokia's IT SOX risk posture and ensure compliance
• Establish control frameworks and monitor compliance across IT processes
• Provide subject matter expertise to stakeholders on IT SOX controls
• Communicate complex concepts to technical and non-technical audiences

Skills

IT SOX

Risk assessment

Control frameworks

Compliance monitoring

Communication (English)

Education

Undergraduate degree in information systems or computer science

Advanced degree in engineering/cybersecurity/information assurance/information security/information systems/computer science

Job description

As a Information Security is the central nerve center for cyber security strategy, architecture, and incident management - operating at the intersection of cutting-edge 5G/6G innovation and enterprise-wide risk resilience. You will be part of the IT SOX Compliance team within Information Security who is responsible for tracking Nokia's IT SOX risk posture and ensuring adherence to compliance requirements by establishing control frameworks, monitoring compliance, and providing subject matter expertise.

Must-Have

• - Undergraduate degree in information systems or computer science, advanced degrees in engineering, cybersecurity, information assurance, information security, information systems or computer science with 6+ plus years of experience (Big 4 audit firm experience is an added advantage); In-depth knowledge and understanding of IT SOX requirements
• - Excellent knowledge of IT processes, applications, and infrastructure. Experience with assessing and reviewing technology risks and controls over areas including access management, change management, and computer operations for IT applications and infrastructure (operating systems, databases, and network components)
• - Solid organizational, analytical and problem-solving skills with the ability to gather and critically evaluate information; Ability to articulate complex concepts and decisions to both technical and non-technical audiences; Excellent command of written and spoken English.
• - Certified Information Systems Auditor (CISA), Information Systems Security Professional (CISSP).

Nice-to-Have

• - Demonstrated ability to rapidly translate complex processes into clear, structured, and executable security strategies - thriving in fast-paced, transformational settings.
• - A natural inclination to anticipate gaps before they become deficiencies, with a passion for researching emerging technologies and trends.
• - A strong team player who leads by example and builds consensus across geographically distributed, cross-functional teams - convincing stakeholders through data-driven insights and trusted advisory relationships.
• - Ability to balance SOX requirements with business enablement objectives with pragmatic & cost-efficient decisions but still aligning with organizational strategic goals.