Customer Security Manager - MEA at Nokia

Job Key Tasks & Responsibilities:

• Act as single point of contact from Nokia towards defined customers in all security and data privacy topics.
• Negotiate security clauses in supply-contracts and statements of work (SoW) for services projects with customers.
• Accountability of all contractual security matters towards your scope of customers.
• Perform gap and  impact analysis for regulatory and  contractual requirements for compliance with security and privacy requirements 
• Security feedback and escalation on meeting the commitments made. 
• Support delivery of the customer security solution as part of Customer and Delivery Teams.
• Responsibility of personnel security and safeguarding information and assets during the customer project.
• Supporting role with regards to customer security solution and requirements from pre-sales to delivery and CARE phase.
• Supporting role in developing security sales plans for target accounts, including identification of potential sales opportunities.
• Contribute to Cloud Security Design and compliance aspects for deploying telco services in Private, hybrid and public cloud-based solutions
• Drive cyber security policy compliance in public cloud deployments(AWS, GCP, Azure etc)
• Co-ordinate (a) reporting of high-profile vulnerabilities to customers, (b) assessment of customer provided security/pen test results with R&D, and (c) negotiation of expert severity, dispositions and mitigation plans with customers
• Oversee compliance with customer contract software escrow requirements including reporting to customer, managing product list changes and driving resolution of issues
• Handle customer queries, questionnaires related to security and privacy.
• Evaluate customer requests for audits and assessments and co-ordinate the necessary activities in Nokia.
• Participate to customer security community within Nokia and contribute to global and local mode of operations development and share best practices.

KEY SKILLS AND EXPERIENCE

Required Qualifications: Education, Technical Skills/ Knowledge

• Knowledgeable and expertise of the latest trends pertaining to security in general and cyber security specifically.
• Subject matter expert in security standards (e.g. ISO 27001, NIST, CMMC) and the latest trends.
• Experience in or ability to relate to various security standards, frameworks and regulatory requirements 
• Familiarity with DevOps know-how building and deploying infrastructure with cloud deployment, build and test automation technologies like ansible, docker, jenkins, etc.
• Expertise in vulnerability management and CVSS framework.
• Working knowledge of vulnerability scanning tools such as Anchore, Qualys and Tenable.
• Working knowledge of customer remote access and customer data security and privacy solutions
• Working knowledge of deploying telco cloud security solutions including 5G deployment and challenges related to access control and data privacy
• Understanding of industry standards and frameworks (e.g. 3GPP, NESAS) and related solutions is an advantage
• Security certification (e.g. CISM, CISSP, CRISC, CISA, CCSP) is an advantage. 
• Project management certification (e.g. PMI) is an advantage 
• Experience in translating security needs to business/ solution requirements and management of those requirements
• Customer-oriented way of working and experience of customer service
• Excellent oral presentation skills including the ability to simplify complex matters
• Excellent interpersonal skills
• Creative and problem-solving mind-set
• Bachelor’s degree or higher
• Strong security skills (5-10 years of experience)
• Ability to collaborate across Business Groups/ Unit boundaries