Compliance Assessor Professional

Nokia; Bengaluru; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

Nokia seeks an experienced IT SOX professional to join the Information Security team in Bengaluru. You will support audits, assess IT processes and controls, and collaborate across Digital Office and Business Groups to ensure compliance.

The role emphasizes control design, remediation leadership, and governance alignment. Applicants should have 6+ years in IT SOX, strong knowledge of access/change management, and English fluency.

Qualifications

• 6+ years of IT SOX experience and strong understanding of IT controls.
• Experience in assessing access management, change management, and IT operations controls.
• Excellent written and spoken English with the ability to communicate complex topics.
• CISA and/or CISSP certifications are highly desirable.

Responsibilities

• Support IT General Controls SOX audits to ensure controls are designed, implemented, operated and audited annually.
• Perform risk assessments and drive remediation to mitigate identified risks and deficiencies.
• Collaborate with internal stakeholders on control design, implementation and operation topics.
• Identify and drive improvements in the control environment and governance forums.
• Coordinate IT SOX audits with internal and external auditors for timely completion.
• Advise and lead remediation activities for deficiencies and exposure analysis.
• Engage with Nokia Internal Controls, Digital Office, and Business Groups to align IT SOX topics.

Skills

IT SOX knowledge

Audit experience

English proficiency

Risk assessment

Education

Bachelors in Information Systems or Computer Science

Advanced degree in engineering/cybersecurity/info assurance

CISA

CISSP

Job description

As a Information Security is the central nerve center for cyber security strategy, architecture, and incident management - operating at the intersection of cutting-edge 5G/6G innovation and enterprise-wide risk resilience. You will be part of the IT SOX Compliance team within Information Security who is responsible for tracking Nokia's IT SOX risk posture and ensuring adherence to compliance requirements by establishing control frameworks, monitoring compliance, and providing subject matter expertise.

HOW YOU WILL CONTRIBUTE AND WHAT YOU WILL LEARN

• Support the Sarbanes-Oxley (SOX) Audits for IT General Controls by ensuring controls are designed, implemented, operated, and audited on a yearly basis to enforce compliance
• Perform risk assessments, support effective remediations that mitigate identified risks, manage deficiencies and exposure analysis
• Collaborate with and provide subject matter expertise support to internal stakeholders from Digital Office and Business Groups on control design, implementation, and operation topics.
• Proactively identify and drive improvement opportunities in the control environment.
• Coordinate IT SOX audits with internal and external auditors, handle governance and ensure smooth and timely completion of the audits.
• Advise & lead timely completion of remediation activities for the deficiencies and ensure appropriate exposure analysis is performed.
• Attend the governance forums and ensure alignment with the internal stakeholders (Nokia Internal Controls, Digital Office, Business Groups etc.,) on key IT SOX topics.

Qualifications

Must-Have

• Undergraduate degree in information systems or computer science, advanced degrees in engineering, cybersecurity, information assurance, information security, information systems or computer science with 6+ plus years of experience (Big 4 audit firm experience is an added advantage); In-depth knowledge and understanding of IT SOX requirements
• Excellent knowledge of IT processes, applications, and infrastructure. Experience with assessing and reviewing technology risks and controls over areas including access management, change management, and computer operations for IT applications and infrastructure (operating systems, databases, and network components)
• Solid organizational, analytical and problem-solving skills with the ability to gather and critically evaluate information; Ability to articulate complex concepts and decisions to both technical and non-technical audiences; Excellent command of written and spoken English.
• Certified Information Systems Auditor (CISA), Information Systems Security Professional (CISSP).

Nice-to-Have

• Demonstrated ability to rapidly translate complex processes into clear, structured, and executable security strategies - thriving in fast-paced, transformational settings.
• A natural inclination to anticipate gaps before they become deficiencies, with a passion for researching emerging technologies and trends.
• A strong team player who leads by example and builds consensus across geographically distributed, cross-functional teams - convincing stakeholders through data-driven insights and trusted advisory relationships.
• Ability to balance SOX requirements with business enablement objectives with pragmatic & cost-efficient decisions but still aligning with organizational strategic goals.