Cyber Security Advisor/SRI Lead

Description

The Service Operations Specialist technically manages and operates components of IT and telecommunications services provided to end users of Nokia customers, within service levels agreed with those customers.Having sound knowledge of security assessments and risk indexing and various global cyber security standards and frameworks ISO 27XXX, GDPR, NIS2 , NIST, HIPAA, TSA, SOC2, ITU-T, 3GPP , CSA - CCM, ITIL etc.

Certifications - ISO 270001 LA/LI, CISA , ITIL V3/4

Your responsibilities

• Conduct comprehensive security risk assessments for telecom network infrastructure: This includes identifying potential threats, vulnerabilities, and attack vectors, analyzing their impact on network operations and services, and evaluating the effectiveness of existing security controls.
• Develop and maintain security risk registers: Track identified risks, mitigation plans, and remediation progress for the telecom network.
• Collaborate with network engineers, security architects, and other stakeholders: Understand their security requirements and develop tailored risk mitigation strategies for the telecom network.
• Develop and implement security policies, standards, and procedures: Ensure compliance with industry best practices, regulatory requirements, and Nokia's internal security guidelines for the telecom network.
• Conduct security audits and reviews: Assess the effectiveness of existing security controls and identify areas for improvement within the telecom network.
• Stay abreast of emerging security threats and vulnerabilities: Focus on threats and vulnerabilities specific to the telecom industry and recommend appropriate countermeasures for the network.
• Develop and deliver security awareness training programs: Tailor training programs to the specific needs of personnel involved in managing and operating the telecom network.
• Contribute to the development and implementation of the organization's overall security strategy: Focus on the security strategy for the telecom network and its integration with the broader organizational security strategy

Your skills and experience

• Bachelor's degree in Computer Science, Information Security, Electrical Engineering, or a related field.
• Minimum of 10-15 years of experience in security risk assessment, vulnerability management, or a related field within the telecom industry.
• Strong understanding of security principles, methodologies, and best practices specifically relevant to telecom networks.
• Experience with security frameworks such as ISO 27001, NIST Cybersecurity Framework, or similar, with a focus on their application to telecom networks.
• Proven ability to conduct threat modeling, vulnerability analysis, and impact assessments for telecom network infrastructure.
• Experience with network security technologies such as firewalls, intrusion detection systems, VPNs, and network segmentation.
• Familiarity with telecom protocols and standards (e.g., SS7, Diameter, SIP) and their security implications.