Security Architect

At Nokia Information Security is the central nerve center for cyber security strategy, architecture, and incident management operating at the intersection of cutting-edge 5G/6G innovation and enterprise-wide risk resilience. Are you a visionary security leader who thrives on driving thought leadership and orchestrating multiple high-stakes security initiatives simultaneously

• Nokia's enterprise by defining forward-looking security architecture strategies, influencing the company's security roadmap, and establishing security best practices that set the standard across Business Groups, Finance & IT (FIT), and Central Functions.
• Including IT & Business Digitalization initiatives, Nokia Solution Offering assessments (USIT programs, NESC Initiatives securization, UK TSA Privileged Access Workstation...), and corporate infrastructure security transformations from strategic conception through delivery and validation.
• Architect and validate end-to-end security solutions spanning Zero Trust Network Architecture, IAM, multi-cloud security (Azure, GCP, AWS), network and application segmentation, AI security, data protection, and BC/DR cyber resiliency - ensuring seamless integration across DevOps and Agile delivery pipelines.
• Serve as Nokia's Trusted Security Advisor to senior stakeholders across BGs and Central Functions, providing authoritative guidance on security strategy, supplier contract risk, M&A security due diligence, and regulatory interactions with government bodies.
• Proactively identify and remediate security vulnerabilities in existing and emerging digital solutions through rigorous security architecture assessments, penetration testing insights, and cost-efficient hardening recommendations - always staying ahead of evolving attack tactics.
• Champion innovation by defining, budgeting, presenting, and delivering new security solutions into Nokia's corporate infrastructure, bridging strategic vision with technical execution in a cloud-first, transformation-driven environment.

Must-Have

• Bachelor's degree with 5+ years of enterprise security architecture experience with a demonstrated track record of simultaneously leading multiple complex, cross-functional security programs balancing strategic vision with hands-on technical execution across diverse stakeholder groups.
• Deep, broad security architecture expertise: Mastery of modern security domains including Zero Trust, IAM, multi-cloud security (Azure/GCP/AWS), application and network security, AI security, and Software Security - combined with strong fluency in threat modeling frameworks (MITRE, STRIDE, Kill-Chain) and standards such as NIST CSF, ISO 27001, and DevSecOps methodologies.
• Executive-level communication and stakeholder influence: Exceptional ability to articulate complex security concepts and architectural decisions to both technical and non-technical audiences - including C-suite, BG leadership, government entities, and remote global teams - with outstanding written, verbal, and presentation skills.
• Technical depth with an automation mindset: Hands-on experience designing and implementing multi-cloud security environments, supported by solid scripting proficiency (Python, PowerShell, Ansible, Java/C) and a security automation-first approach; relevant certifications (CISSP, CISM, OSCP, CEH) are a strong differentiator.

Nice-to-Have

• Strategic agility in ambiguous environments: Demonstrated ability to rapidly translate complex, evolving threat landscapes and organizational ambiguities into clear, structured, and executable security strategies - thriving in fast-paced, transformational settings.
• Proactive security innovation mindset: A natural inclination to anticipate security gaps before they become incidents, with a passion for researching emerging attack techniques, new defensive technologies, and industry-shaping security trends.
• Collaborative influence across virtual teams: A strong team player who leads by example and builds consensus across geographically distributed, cross-functional teams - convincing stakeholders through data-driven insights and trusted advisory relationships.
• Customer and business-centric security focus: Ability to balance rigorous security requirements with business enablement objectives, ensuring security architecture decisions are pragmatic, cost-efficient, and aligned with Nokia's commercial and strategic goals.