Senior Security Compliance Assessor

Nokia Global; Portugal; Presencial; EUR 60 000 - 90 000; Tempo integral

Resumo da oferta

A Nokia Global procura um Senior Security Compliance Assessor para fortalecer a conformidade de segurança, governa nça de identidades e gestão de acessos em Portugal. Colabora com Digital Office, IT Operations e parceiros externos, promovendo melhoria contínua de controles de acesso e governança de segurança.

O candidato ideal possui mestrado em ciência da computação, inglês fluente e pelo menos 7 anos de experiência em cybersecurity, com foco em IAM/PAM e auditorias, incluindo competências de

Qualificações

• Experiência mínimo de 7 anos em cybersecurity, com pelo menos 3 anos em Security Services relacionados com Cloud Security, IAM e PAM.
• Conhecimento de IAM/PAM, RBAC/ABAC e tecnologias de identidade federadas (SAML, OAuth).
• Experiência com operações de TI, auditoria de segurança e gestão de riscos.
• Certificações relevantes como CISSP/CIAM são desejáveis.
• Conhecimentos de frameworks/regulamentos de segurança (NIST, ISO 27001, GDPR, SOX).

Responsabilidades

• Monitorização de conformidade de operações de TI e auditorias regulares.
• Desenvolvimento de KPIs para traçar a eficácia de soluções de gestão de acesso.
• Definição e execução de estratégias de acesso privilegiado e governança de identidade.
• Gestão de tecnologias de acesso privilegiado, incluindo configuração, políticas e integração com sistemas.
• Gestão do ciclo de vida de identidades e de direitos de acesso, com revisão periódica.

Conhecimentos

IAM/PAM principles

RBAC/ABAC

SAML/OAuth

English proficiency

Analytical thinking

Problem solving

Stakeholder communication

Automation scripting

Formação académica

Master's degree in computer science or related field

Descrição da oferta de emprego

Senior Security Compliance Assessor

Empresa : Nokia Global Tipo de Emprego : Periodo Integral Portugal

Descrição do Emprego - Senior Security Compliance Assessor

Description

In this role, you will help strengthen Nokia's IT security and access management environment, ensuring compliance with company policies, regulatory requirements, and industry best practices. Working closely with the Digital Office, IT Operations teams, Business Groups, and external partners, you will drive the continuous improvement of access controls, privileged access management, and security governance while promoting simplification, standardization, and operational excellence across the organization.

Responsibilities

• IT Operations Compliance Monitoring:Conduct regular assessments and audits of IT operations and services to ensure compliance with internal security policies, external regulations (e.g., GDPR, SOX), and industry standards.
• Metrics and Reporting:Develop and maintain key performance indicators (KPIs) to track the effectiveness of access management solutions and compliance posture. Regularly report on performance to stakeholders, highlighting successes, challenges, and areas for improvement.
• Continuous Improvement:Proactively identify opportunities to improve the efficiency, effectiveness, and cost-optimization of access management processes, compliance activities, and vulnerability management. This includes researching industry's best practices, implementing new technologies, and refining processes.
• Access Management Strategy and Planning:Collaborate in the definition and execution of the overall strategy for Nokia's identity and privileged access programs, aligning them with broader security objectives and business needs. This includes setting program goals, defining scope, and developing a roadmap for continuous improvement.
• Privileged Access Solution Management:Manage and maintain privileged access technologies, ensuring optimal performance, security, and integration with other systems. This includes user management, configuration updates, policy enforcement, and troubleshooting.
• Identity Lifecycle Management:Oversee the lifecycle of identities and access rights, from provisioning and de-provisioning to regular reviews, ensuring the principle of least privilege and segregation of duties are applied.
• Access Control and Governance:Implement and enforce robust access control policies and governance frameworks across Nokia's IT landscape. This includes managing Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) where applicable.

Qualifications

• Education:Master's degree in computer science or a related technical field, with specializations in Cybersecurity, Information Assurance, or Information Security.
• English proficiency.
• Experience: 7 years of overall experience in Cybersecurity, with a minimum of 3 years of hands-on experience in Security Services related with Cloud Security, Identity and Access Management (IAM) and Privileged Access Management (PAM) solutions.
• Strong understanding of IAM/PAM principles, access control models (RBAC, ABAC), and identity federation technologies (e.g., SAML, OAuth).
• Proven experience with privileged access technology administration, policy configuration, and integration with various IT systems.
• Experience in IT operations compliance, security auditing, and risk management.
• Experience collaborating with diverse technical and non-technical stakeholders.
• Excellent communication, interpersonal, and presentation skills.
• Ability to work independently and as part of a team.
• Strong analytical and problem-solving skills.
• It would be nice if you already have or aspire to pursue:
• Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Identity and Access Manager (CIAM), or similar.
• Experience with cloud security cloud-based identity and access management solutions.
• Knowledge of scripting languages for automation for example of access management tasks.
• Experience with security frameworks and regulations (e.g., NIST, ISO 27001, GDPR, SOX).

Sobre a empresa

Nokia Global

Advancing connectivity to secure a brighter world. Nokia is a global leader in connectivity for the AI era. With expertise across fixed, mobile and transport networks, powered by the innovation of Nokia Bell Labs, we're advancing connectivity to secure a brighter world. Learn more about life at Noki...