Senior Compliance Assessor

Nokia

Senior Compliance Assessor responsible for security assessments in Nokia's operations. Collaborating with Security Architecture & Solutions team on privacy controls and vulnerabilities.

Posted 7/20/2026full-timeBangalore • 🇮🇳 IndiaSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates strong expertise in network and application security, IAM and privacy controls, and vulnerability management across corporate IT environments. Proficient in executing security assessments and collaborating with stakeholders to implement effective remediation strategies.

Highest-signal resume keywords

Network Security ExpertiseApplication Security ExpertiseVulnerability Management LifecycleCommand-Line Tool ProficiencyZero Trust Principles Familiarity

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Network SecurityApplication SecurityIAM ControlsVulnerability ManagementSecurity AssessmentThreat IntelligenceSecurity TestingWindows Operating SystemLinux Operating SystemMulti-Cloud Security Assessment

Soft Skills

Strong Presentation SkillsCollaboration with Stakeholders

Tools & Technologies

FirewallsProxiesIPSEndpoint SecuritySIEM SolutionsMITRE ATT&CKAzureGCPAWS

Industry Keywords

Corporate IT Operational EnvironmentsZero Trust PrinciplesAPI SecuritySecurity Control GapsSecurity Vulnerabilities

Tech Stack

Tools & technologies

AWSAzureCloudFirewallsGoogle Cloud PlatformLinux

About the role

Key responsibilities & impact

Gather, create & maintain relevant threat intelligence of potential security control weaknesses and security vulnerabilities across Nokia’s corporate system infrastructure. This effort will be performed in close collaboration with other Information Security Teams.
Define security assessment & testing strategy for the target system by taking into account system specifications, system mechanisms, system activities, user roles & associated privileges and permissions in the context of all available threat intelligence data.
Execute the security assessment strategy to verify & validate if relevant security & privacy controls are implemented on targeted system(s) & their operational environment. You will also assess their maturity and effectiveness in meeting Nokia’s security goals & objectives.
Model threats to determine the exploitability & the criticality of various security vulnerabilities on the target system(s).
Execute the security testing strategy by building and executing payloads to validate & confirm these identified weaknesses.
List all identified security control gaps and security vulnerabilities for each target system(s) and document those in “security assessment & testing” reports.
Advise and collaborate with all relevant Information Security Teams & other key stakeholders (IT, business teams) to provide conclusive strategies on how to best mitigate all identified security control gaps and vulnerabilities for each target system(s).
Be a key contributor to provide relevant assessment and testing outputs to red and purple teams to support their continuous improvement actions of response processes and architectural capabilities.

Requirements

What you’ll need

Strong expertise in network & application security, IAM & privacy controls, networking concepts and architectural implementations and expertise in Windows & Linux operating systems in various roles in both user-level and privileged-user capacities
Deep understanding of a corporate IT operational environments
Diverse operational security experience with security platforms, such as: firewalls, proxies, IPS, Vulnerability Management, endpoint security & SIEM solutions.
The ability to effectively use command-line tools to achieve functions throughout the MITRE ATT@CK lifecycle (Windows and Linux)
Demonstrated & proven ability to review & validate test results and Demonstrated & proven ability to propose, design & implement IT and security solutions remediating the detected findings & vulnerabilities in close collaboration with other SAS teams (security analysts, security specialists and security architects)
Familiarity with zero trust principles, API security, and associated attack vectors and The ability to conduct technical security assessments, advise & pursue stakeholders on remediation strategies & action plans
Vulnerability management lifecycle skills including identification, validation, rating, and remediation of identified weaknesses and experience in the operational use of multi-cloud security assessment, vulnerability, and testing solutions in Azure, GCP and/or AWS
Strong presentation skills and the ability to convey technical security concepts to non-technical audiences

Benefits

Comp & perks

Health insurance
Professional development
Flexible work arrangements