Job DescriptionThe Technical Compliance Specialist serves as a member of Nokia's National Security Office (NSO) and provides technical analysis, compliance support, and regulatory assessment capabilities related to product security vulnerabilities, cybersecurity incidents, and technical risk matters affecting Nokia's U.S. operations.
Working closely with Product Security, Engineering, Vulnerability Management, and the National Security Office, the role assists in evaluating security vulnerabilities, understanding potential customer impacts, assessing remediation activities, and supporting the NSA Security Officer in determining whether security-related matters warrant further compliance review or potential notification to U.S. Government stakeholders.
The role acts as a bridge between technical organizations and regulatory compliance functions by transforming complex technical information into actionable compliance and business risk assessments.
ResponsibilitiesProduct Security Analysis- Review significant product security vulnerabilities, CVEs, security advisories, and cybersecurity incidents affecting Nokia products and services.
- Analyze vulnerability severity, exploitability, affected products, remediation plans, and potential customer impact.
- Evaluate technical risks associated with vulnerabilities affecting U.S. telecommunications customers and critical infrastructure.
- Monitor emerging cybersecurity threats and vulnerability trends relevant to Nokia products.
Regulatory Impact Assessments- Assist the NSA Security Officer in evaluating the regulatory significance of product security vulnerabilities and cybersecurity incidents.
- Assess potential implications to Nokia's obligations under the U.S. National Security Agreement.
- Support reviews to determine whether incidents or vulnerabilities may warrant escalation, regulatory review, or government notification.
- Develop risk-based assessments supporting regulatory decision-making.
Product Security Liaison Activities- Work closely with Product Security personnel to understand vulnerability investigations, security findings, and remediation activities.
- Facilitate information exchange between Product Security organizations and NSO leadership.
- Support vulnerability governance reviews and related compliance activities.
- Assist with tracking significant remediation activities and corrective actions.
Technical Compliance Documentation- Support maintenance of the NSA Technical Compliance Manual and associated technical compliance procedures.
- Prepare technical summaries, security assessments, compliance analyses, and executive briefing materials.
- Maintain records supporting vulnerability reviews and regulatory assessments.
- Assist with development of technical compliance guidance and reference materials.
Audit & Compliance Support- Support third-party audit activities involving product security, vulnerability management, and technical compliance requirements.
- Assist in gathering technical evidence and documentation required for audits and regulatory reviews.
- Support responses to government inquiries involving product security matters.
- Contribute to the continuous improvement of technical compliance and governance processes.
QualificationsKnowledge & Experience- Understanding of product security, cybersecurity, vulnerability management, and security risk assessment concepts.
- Ability to evaluate technical security information and communicate business and regulatory implications.
- Experience working with Product Security, Engineering, Information Security, Vulnerability Management, or related technical functions.
- Familiarity with compliance, audit, governance, or regulatory oversight activities.
- Strong analytical, organizational, writing, and communication skills.
- Experience within telecommunications, software development, cybersecurity, or highly regulated environments preferred.
