Security Risk & Compliance Coordinator

Nokia Global; Portugal; On-site; EUR 60,000 - 90,000; Full time

Job summary

Nokia Global in Portugal is seeking a Security Risk Manager to oversee risk governance, assess threats, and ensure alignment with the Nokia Information Security Policy across the enterprise.

The role focuses on risk assessment, remediation guidance, and driving improvements in information security maturity, working with cross-functional teams to protect critical assets and maintain compliance.

Qualifications

• Cross organisational impact by supporting risk-based decision making process in scope of information security.
• Operates autonomously in own subject area. Can analyze, develop and implement concepts and solutions as a subject matter expert.
• Communicates with parties within and outside of own job function and teams at all organizational levels.
• Management Experience / Achieved well-advanced skills in Information Security Management with focus on Security Risk and Compliance in a global technological organizations.

Responsibilities

• Assesses compliance, identifies deficiencies, determines risk level, recommends solutions and provides guidance to protect Nokia information.
• Engages with stakeholders to share knowledge on information security risk management and ensure representation in governance forums.
• Supports business stakeholders to improve security posture by defining present risk levels and remediation actions.
• Drives cultural change around Information Security Risk Management and coordinates security and business stakeholder needs.
• Develops and implements standards for security risk and compliance management and defines requirements for Security GRC tool implementation.
• Coordinates operational and transformational activities of Security Risk Management and reports status and challenges to the GRC Transformation Program.
• Contributes to projects in alignment with corporate processes.

Job description

Nokia Global in Portugal is seeking a Security Risk Manager to oversee risk governance, assess threats, and ensure alignment with the Nokia Information Security Policy across the enterprise.

The role focuses on risk assessment, remediation guidance, and driving improvements in information security maturity, working with cross-functional teams to protect critical assets and maintain compliance.