Compliance Assessor

• Will NSA/CAPS approval be required? (E.g., accessing a US Customer Network?): No
• Role Type: Individual contributor
• Laptop - support with ordering needed: No
• Experience level: Experienced

As a  Information Security is the central nerve center for cyber security strategy, architecture, and incident management — operating at the intersection of cutting-edge 5G/6G innovation and enterprise-wide risk resilience.You will be part of the IT SOX Compliance team within Information Security who is responsible for tracking Nokia’s IT SOX risk posture and ensuring adherence to compliance requirements by establishing control frameworks, monitoring compliance, and providing subject matter expertise.

Responsibilities

• Support the Sarbanes-Oxley (SOX) Audits for IT General Controls by ensuring controls are designed, implemented, operated, and audited on a yearly basis to enforce compliance

• Perform risk assessments, support effective remediations that mitigate identified risks, manage deficiencies and exposure analysis

• Collaborate with and provide subject matter expertise support to internal stakeholders from Digital Office and Business Groups on control design, implementation, and operation topics.

• Proactively identify and drive improvement opportunities in the control environment.

• Coordinate IT SOX audits with internal and external auditors, handle governance and ensure smooth and timely completion of the audits.

• Advise & lead timely completion of remediation activities for the deficiencies and ensure appropriate exposure analysis is performed.

• Attend the governance forums and ensure alignment with the internal stakeholders (Nokia Internal Controls, Digital Office, Business Groups etc.,) on key IT SOX topics.

Qualifications

Must-Have

• Undergraduate degree in information systems or computer science, advanced degrees in engineering, cybersecurity, information assurance, information security, information systems or computer science with 6+ plus years of experience (Big 4 audit firm experience is an added advantage); In-depth knowledge and understanding of IT SOX requirements
• Excellent knowledge of IT processes, applications, and infrastructure. Experience with assessing and reviewing technology risks and controls over areas including access management, change management, and computer operations for IT applications and infrastructure (operating systems, databases, and network components) 
• Solid organizational, analytical and problem-solving skills with the ability to gather and critically evaluate information; Ability to articulate complex concepts and decisions to both technical and non-technical audiences; Excellent command of written and spoken English.
• Certified Information Systems Auditor (CISA), Information Systems Security Professional (CISSP).

Nice-to-Have

• Demonstrated ability to rapidly translate complex processes into clear, structured, and executable security strategies — thriving in fast-paced, transformational settings.
• A natural inclination to anticipate gaps before they become deficiencies, with a passion for researching emerging technologies and trends.
• A strong team player who leads by example and builds consensus across geographically distributed, cross-functional teams — convincing stakeholders through data-driven insights and trusted advisory relationships.
• Ability to balance SOX requirements with business enablement objectives with pragmatic & cost-efficient decisions but still aligning with organizational strategic goals.

About Us