Security Risk Management Coordinator

Nokia; Bengaluru; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Nokia is seeking an experienced information security professional to lead security risk oversight within our global operations. The role focuses on monitoring risks, maintaining the risk management framework, and hosting governance meetings with business stakeholders to ensure aligned risk posture.

You will engage with executives and teams across the enterprise to define present risk levels, specify acceptable risk, and drive remediation actions, while contributing to standards for risk and

Qualifications

• Assess compliance, identify deficiencies, determine risk, and guide remediation.
• Engage with stakeholders to ensure information security management is represented in governance forums.
• Drive cultural change around information security risk management processes.
• Develop and implement standards for security risk and compliance management and define requirements for Security GRC tools.

Responsibilities

• Assess compliance, identify deficiencies, determine risk level, recommend solutions and guide remediation.
• Engage with stakeholders and share expertise on information security risk management across the organisation.
• Support business stakeholders to improve security posture by defining present risk levels and remediation actions.
• Drive cultural change around Information Security Risk Management processes and address stakeholder needs.
• Develop standards for security risk and compliance management and define functional requirements for Security GRC tool implementation.
• Coordinate operational and transformational activities of Security Risk Management and report status to Security GRC Transformation Program.
• Contribute to projects in line with corporate processes.

Skills

Cross-Organisational Impact

Autonomous Individual Contributor

Executive Communication

Information Security Management

Job description

Job Description

manages and monitors security risks; maintains security risk management framework; hosts risk governance and management meetings with business stakeholders; supports customer and certification audits.

Security Risk Management team

focuses on security risk oversight and reporting:

• manages and monitors security risks;
• maintains security risk management framework;
• hosts risk governance and management meetings with business stakeholders;
• supports customer and certification audits.

How You Will Contribute And What You Will Learn

• Assesses the compliance, identifies deficiencies, determines risk level, recommends solutions and give guidance and support to ensure Nokia information is protected in line with the Nokia Information Security Policy, done in a cost effective and innovative way bringing value, through simplification, standardisation and homogenisation.
• Engages with stakeholders and shares knowledge and expertise on the information security risk management and related security management perspectives across the organisation to ensure information security management is adequately represented on relevant business and governance forums and is known, well-integrated, and well-respected across the enterprise.
• Supports business stakeholders to improve their security posture by defining the present risk level, setting the standard which risk is acceptable and defining remediation actions.
• Drives a cultural change around Information Security Risk Management process, identifying needs of the security and business stakeholders, making suggestions for improvement and preparing the necessary steps so that these needs can be timely addressed.
• Develops and implements standards for security risk and compliance management, clearly defining functional requirements for Security GRC tool implementation.
• Coordinates operational and transformational activities of Security Risk Management team and reports to Security GRC Transformation Program about status, dependencies and challenges.
• Contributes to projects in accordance to our corporate processes.

Key Skills And Experience

• Cross organisatonal impact by supporting risk-based decision making process in scope of information security.I
• Individual Contributor: Operates autonomously in own subject area. Can analyze, develop and implement concepts and solutions as a subject matter expert. Increased awareness of and involvement outside of own subject area. Distils big picture. Makes decisions about and prioritizes own work. Managerial/Supervisory: Clear managerial responsibilities for people. Typically first level of solid line management. Interprets policies. Ensures existing plans are put into operation. Executes and/or oversees processes to meet stakeholders´needs. Responsible for analysis, design & development of policies, plans, programs in scope of Security Risk and Compliance Managmenet.
• Carries out specialised activities/projects according to general direction. Influences others to support decisions. Works mostly independently. Analyze situations or data that requires review of relevant factors. Solutions can often be checked and proved. Demonstrates success in multiple roles and is adaptable to manage complex changing business environments.
• Communicates with parties within and outside of own job function and teams at all organizational levels. Works to influence others to accept job function’s view/practices and agree/accept new concepts, practices, and approaches. Has cross-cultural knowledge and global mindset. Requires ability to communicate with executive leadership regarding matters of significant importance to the organisation. May conduct briefings with senior leaders within the job function and negotiate regarding operational issues.
• Management Experience / Achieved well-advanced skills in Information Security Management with focus on Security Risk and Compliance in a global technological organizations, combining deep knowledge of theory and organisational practice or expertise.