Compliance Assessor

As a Information Security is the central nerve center for cyber security strategy, architecture, and incident management — operating at the intersection of cutting-edge 5G/6G innovation and enterprise-wide risk resilience. You will be part of the IT SOX Compliance team within Information Security who is responsible for tracking Nokia’s IT SOX risk posture and ensuring adherence to compliance requirements by establishing control frameworks, monitoring compliance, and providing subject matter expertise. Must-Have Undergraduate degree in information systems or computer science, advanced degrees in engineering, cybersecurity, information assurance, information security, information systems or computer science with 6+ plus years of experience (Big 4 audit firm experience is an added advantage); In-depth knowledge and understanding of IT SOX requirements Excellent knowledge of IT processes, applications, and infrastructure. Experience with assessing and reviewing technology risks and controls over areas including access management, change management, and computer operations for IT applications and infrastructure (operating systems, databases, and network components) Solid organizational, analytical and problem-solving skills with the ability to gather and critically evaluate information; Ability to articulate complex concepts and decisions to both technical and non-technical audiences; Excellent command of written and spoken English. Certified Information Systems Auditor (CISA), Information Systems Security Professional (CISSP). Nice-to-Have Demonstrated ability to rapidly translate complex processes into clear, structured, and executable security strategies — thriving in fast-paced, transformational settings. A natural inclination to anticipate gaps before they become deficiencies, with a passion for researching emerging technologies and trends. A strong team player who leads by example and builds consensus across geographically distributed, cross-functional teams — convincing stakeholders through data-driven insights and trusted advisory relationships. Ability to balance SOX requirements with business enablement objectives with pragmatic & cost-efficient decisions but still aligning with organizational strategic goals.