Security and Privacy Manager

Daily activities

The successful candidate will implement and assist in execution of programs mandated by global HSSE organization on Information Security and Privacy Risk Management for Nokia in accordance with business group risk, customer requirements, industry standards and legal requirements. Monitors performance and the implementation of information security and privacy services.

Main Responsibility Areas and Key Tasks:

• Formulate business group information security and privacy roadmap and collaborate with key stakeholders to support execution
• Partner with business group services team and tailor global information security and privacy program as per business risk and customer requirements
• Support execution of global information security and privacy program in the business groups
• Translate security and privacy requirements from program/laws/regulations into product development, process implementation, technical and business operational requirements
• Assess and audit business group processes and practices based on security and privacy risk areas and recommend remediation actions
• Partner with Global Privacy Counsels to proactively address regulatory compliance requirements and identify opportunities for collaboration, alignment, process improvement and best practices sharing and implementation
• Monitor and track program implementation, risk management and reporting
• Support security and privacy incident management and related investigations
• Support BG’s in developing information security and privacy specific training program development
• Train and Coach BG team members on information security and privacy implementation in operations and product development

Our expectations:

• Master’s or Bachelor’s degree in Engineering, Electronics or Computer Sciences
• 10 years of experience in Information Security Systems Management, Privacy and/or Auditing
• Knowledge of telecommunications industry and compliance
• Certifications in Information Security/ IT security/Privacy (CISSP/CISA/ CIPP/CIPM etc.)
• Familiar with ISO27000 series, data protection and privacy regulation
• ability to work in virtual environment
• strong communication and negotiation skills
• good communication in English (both written and spoken)

• Benefity