Compliance Assessor

Job Description

As a Information Security is the central nerve center for cyber security strategy, architecture, and incident management — operating at the intersection of cutting-edge 5G/6G innovation and enterprise-wide risk resilience. You will be part of the IT SOX Compliance team within Information Security who is responsible for tracking Nokia's IT SOX risk posture and ensuring adherence to compliance requirements by establishing control frameworks, monitoring compliance, and providing subject matter expertise.

How You Will Contribute And What You Will Learn

• Support the Sarbanes-Oxley (SOX) Audits for IT General Controls by ensuring controls are designed, implemented, operated, and audited on a yearly basis to enforce compliance
• Perform risk assessments, support effective remediations that mitigate identified risks, manage deficiencies and exposure analysis
• Collaborate with and provide subject matter expertise support to internal stakeholders from Digital Office and Business Groups on control design, implementation, and operation topics.
• Proactively identify and drive improvement opportunities in the control environment.
• Coordinate IT SOX audits with internal and external auditors, handle governance and ensure smooth and timely completion of the audits.
• Advise & lead timely completion of remediation activities for the deficiencies and ensure appropriate exposure analysis is performed.
• Attend the governance forums and ensure alignment with the internal stakeholders (Nokia Internal Controls, Digital Office, Business Groups etc.,) on key IT SOX topics.
  
  

Key Skills And Experience

Must-Have

• Undergraduate degree in information systems or computer science, advanced degrees in engineering, cybersecurity, information assurance, information security, information systems or computer science with 6+ plus years of experience (Big 4 audit firm experience is an added advantage); In-depth knowledge and understanding of IT SOX requirements
• Excellent knowledge of IT processes, applications, and infrastructure. Experience with assessing and reviewing technology risks and controls over areas including access management, change management, and computer operations for IT applications and infrastructure (operating systems, databases, and network components)
• Solid organizational, analytical and problem-solving skills with the ability to gather and critically evaluate information; Ability to articulate complex concepts and decisions to both technical and non-technical audiences; Excellent command of written and spoken English.
• Certified Information Systems Auditor (CISA), Information Systems Security Professional (CISSP).
  
  

Nice-to-Have

• Demonstrated ability to rapidly translate complex processes into clear, structured, and executable security strategies — thriving in fast-paced, transformational settings.
• A natural inclination to anticipate gaps before they become deficiencies, with a passion for researching emerging technologies and trends.
• A strong team player who leads by example and builds consensus across geographically distributed, cross-functional teams — convincing stakeholders through data-driven insights and trusted advisory relationships.
• Ability to balance SOX requirements with business enablement objectives with pragmatic & cost-efficient decisions but still aligning with organizational strategic goals.
  
  

About Us

Advancing connectivity to secure a brighter world.

Nokia is a global leader in connectivity for the AI era. With expertise across fixed, mobile and transport networks, powered by the innovation of Nokia Bell Labs, we're advancing connectivity to secure a brighter world.

Learn more about life at Nokia .

Our recruitment process

We act inclusively and respect the uniqueness of people. Our employment decisions are made regardless of race, color, national or ethnic origin, religion, gender, sexual orientation, gender identity or expression, age, marital status, disability, protected veteran status or other characteristics protected by law. We are committed to a culture of inclusion built upon our core value of respect.

If you're interested in this role but don't meet every listed requirement, we still encourage you to apply. Unique backgrounds, perspectives, and experiences enrich our teams, and you may be just the right candidate for this or another opportunity.

The length of the recruitment process may vary depending on the specific role's requirements. We strive to ensure a smooth and inclusive experience for all candidates. Discover more about the recruitment process at Nokia .