Security Analyst

• Conduct security assessments of suppliers, service providers, and other third parties using established methodologies and security frameworks
• Review third-party security documentation, certifications, audit reports, and control evidence
• Identify security risks and control gaps and document impact, likelihood, and remediation actions
• Assess risks associated with AI-enabled services, cloud-native platforms, and outsourced digital services
• Define, track, and validate risk treatment and remediation plans with suppliers and business stakeholders
• Support supplier onboarding, periodic reassessments, and ongoing security assurance throughout the third-party lifecycle
• Provide risk-based recommendations to business owners, procurement teams, and management
• Maintain third-party risk records, assessment results, exceptions, and security metrics
• Monitor remediation progress and report outstanding risks, assessment status, metrics, and trends
• Improve third-party risk management processes, methodologies, standards, and procedures
• Promote third-party security awareness and best practices
• Collaborate with procurement, legal, compliance, privacy, audit, and Information Security teams
• Support audits, compliance reviews, and regulatory initiatives
• Monitor emerging cyber threats, vulnerabilities, industry trends, and regulatory developments
• Contribute to executive and operational reporting on third-party security posture and remediation progress

Explore Third Party Security Analyst at Nokia. Review requirements and application details.