Senior Security Assessment & Controls Lead

Nokia; Amadora; Presencial; EUR 70 000 - 100 000; Tempo integral

Resumo da oferta

Nokia is seeking a Senior Compliance Assessor to lead the selection and implementation of security and privacy controls on Nokia's business-critical assets. You will assess overall effectiveness of controls and determine risk to operations and assets, as part of the Information Security SAS team.

You will gather threat intelligence, define assessment strategies, and execute testing to verify control implementation, maturity, and effectiveness.

Qualificações

• Strong expertise in network & application security, IAM & privacy controls, architectural implementations across Windows & Linux systems.
• Deep understanding of corporate IT operational environments.
• Experience with security platforms (firewalls, proxies, IPS, vulnerability management, endpoint security, SIEM).
• Ability to use MITRE ATT&CK lifecycle tools on Windows and Linux.
• Experience reviewing/testing results and proposing remediation with SAS teams.

Responsabilidades

• Gather threat intelligence on security control weaknesses and vulnerabilities across Nokia’s infrastructure.
• Define security assessment and testing strategy based on system specs, roles, and threat data.
• Execute assessment to verify controls are implemented and assess maturity against Nokia’s security goals.
• Model threats to determine exploitability and criticality of vulnerabilities.
• Execute testing strategies by building and running payloads to validate weaknesses.
• Document identified gaps and vulnerabilities in security assessment reports.
• Collaborate with IT and business teams to mitigate identified gaps.
• Contribute assessment outputs to red and purple teams for ongoing improvement.

Conhecimentos

Network security

Application security

IAM

Privacy controls

Windows & Linux

MITRE ATT&CK

Vulnerability management

Security testing

Threat modeling

Presentations

Formação académica

Bachelor's degree in CS/IT

Security certifications (CISSP / CISM)

Ferramentas

Firewalls

Proxies

IPS

SIEM

Vulnerability scanning tools

Cloud security (Azure/GCP/AWS)

Descrição da oferta de emprego

Nokia is seeking a Senior Compliance Assessor to lead the selection and implementation of security and privacy controls on Nokia's business-critical assets. You will assess overall effectiveness of controls and determine risk to operations and assets, as part of the Information Security SAS team.

You will gather threat intelligence, define assessment strategies, and execute testing to verify control implementation, maturity, and effectiveness.