Third Party Security Analyst

Nokia

. Conduct security assessments of suppliers, service providers, and other third parties using established methodologies and security frameworks .

Posted 10/20/2026full-timeAmadora • PortugalMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in third-party risk management, cybersecurity assessments, and compliance with industry standards. Proficient in analyzing security risks and communicating findings effectively to diverse stakeholders.

Highest-signal resume keywords

Third-Party Risk ManagementCybersecurity AssessmentsInformation Security ControlsISO/IEC 27001 KnowledgeStakeholder Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk ManagementSecurity AssessmentsControl ReviewsVulnerability ManagementIncident ManagementData ProtectionCloud SecurityRisk EvaluationsSecurity GovernanceCyber Threat Monitoring

Soft Skills

Analytical SkillsProblem-SolvingCritical ThinkingCollaboration SkillsCommunication Skills

Tools & Technologies

Supplier Security Assessment PlatformsGRC Solutions

Certifications & Qualifications

CISSPCISMCRISCISO 27001 Lead ImplementerISO 27001 Auditor

Industry Keywords

NIST Cybersecurity FrameworkCIS ControlsCOBITISO 31000CybersecurityCompliance ReviewsRegulatory InitiativesCloud-Native PlatformsAI-Enabled ServicesSecurity Metrics

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Conduct security assessments of suppliers, service providers, and other third parties using established methodologies and security frameworks
Review third-party security documentation, certifications, audit reports, and control evidence
Identify security risks and control gaps and document impact, likelihood, and remediation actions
Assess risks associated with AI-enabled services, cloud-native platforms, and outsourced digital services
Define, track, and validate risk treatment and remediation plans with suppliers and business stakeholders
Support supplier onboarding, periodic reassessments, and ongoing security assurance throughout the third-party lifecycle
Provide risk-based recommendations to business owners, procurement teams, and management
Maintain third-party risk records, assessment results, exceptions, and security metrics
Monitor remediation progress and report outstanding risks, assessment status, metrics, and trends
Improve third-party risk management processes, methodologies, standards, and procedures
Promote third-party security awareness and best practices
Collaborate with procurement, legal, compliance, privacy, audit, and Information Security teams
Support audits, compliance reviews, and regulatory initiatives
Monitor emerging cyber threats, vulnerabilities, industry trends, and regulatory developments
Contribute to executive and operational reporting on third-party security posture and remediation progress

Requirements

What you’ll need

Minimum 4 to 8 years of experience in cybersecurity, information security, risk management, audit, compliance, or third-party risk management
Strong understanding of third-party risk management principles, supplier security assurance, and security governance practices
Experience conducting security assessments, control reviews, or risk evaluations in enterprise environments
Strong understanding of information security controls, including access management, vulnerability management, incident management, data protection, and cloud security
Knowledge of ISO/IEC 27001, ISO/IEC 27002, ISO 31000, NIST Cybersecurity Framework, CIS Controls, COBIT, and similar standards
Ability to analyze security risks and communicate findings to technical and non-technical stakeholders
Strong analytical, problem-solving, and critical-thinking capabilities
Excellent stakeholder management and collaboration skills
Strong written and verbal communication skills in English
Master's degree in Cybersecurity, Information Technology, Computer Science, Engineering, Risk Management, or related discipline
Experience with supplier security assessment platforms and GRC solutions
Knowledge of cloud security concepts and SaaS, PaaS, and IaaS assessments
Relevant certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor, or equivalent are nice to have