{"id":2925842,"url":"https://alion.io/job/nokia-third-party-security-analyst","title":"Third Party Security Analyst","company":{"id":17345,"name":"Nokia","domain":"nokia.com","url":"https://alion.io/company/nokia","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"A","score":97,"open_postings":64,"ghost_share":0.016,"stale_share":0.25,"repost_share":0.063,"time_to_fill_p50_days":7,"computed_at":"2026-10-24T06:02:35Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Amadora, Portugal"],"countries":["PT"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":32000,"max_usd":77000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":774},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Incident Management","optional":false},{"name":"ISO 27001","optional":true}],"status":"live","first_seen_at":"2026-10-20T11:44:54Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-24T16:28:54Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"Information Security serves as Nokia's center of excellence for cybersecurity, responsible for defining security policies and standards, shaping the cybersecurity architecture and roadmap, and overseeing security monitoring, detection, and incident management. We actively partner with Nokia's Business Segments and Business Functions to protect critical information, strengthen third-party security, and support compliance with internal and external security requirements.\nIn this role, you will join the Third-Party Security team, which is responsible for assessing and managing security risks associated with suppliers, partners, outsourcing providers, and other third parties. The team works closely with procurement, legal, business owners, suppliers, and Information Security stakeholders to ensure third-party relationships meet Nokia's security expectations and risk tolerance while supporting business objectives.\nAs a trusted security professional, you will evaluate supplier security controls, identify and assess risks, recommend remediation actions, and support ongoing security governance and assurance activities. You will help ensure that third-party security risks are effectively managed throughout the supplier’s lifecycle and that security remains an enabler of business growth and operational resilience.\nResponsibilities include, but are not limited to:\nConducting security assessments of suppliers, service providers, and other third parties using established risk assessment methodologies and security frameworks. \nReviewing third-party security documentation, certifications, audit reports, and control evidence to evaluate security maturity and compliance with Nokia requirements. \nIdentifying security risks and control gaps and documenting impact, likelihood, and recommended remediation actions. \nAssess security risks associated with third parties providing AI-enabled services, cloud-native platforms, and outsourced digital services.\n\nWorking with suppliers and business stakeholders to define, track, and validate risk treatment and remediation plans. \nSupporting supplier onboarding, periodic reassessments, and ongoing security assurance activities throughout the third-party lifecycle. \nProviding risk-based recommendations to business owners, procurement teams, and management to support informed decision-making. \nMaintaining third-party risk records, assessment results, exceptions, and security metrics within designated governance processes and tools.\nMonitoring remediation progress and reporting on outstanding risks, assessment status, key metrics, and trends.\nSupporting the continuous improvement of third-party risk management processes, methodologies, standards, and operating procedures.\nCreating awareness of third-party security risks and promoting security best practices among internal stakeholders and suppliers. \nCollaborating with procurement, legal, compliance, privacy, audit, and Information Security teams to ensure consistent management of third-party security requirements.\nSupporting audit activities, compliance reviews, and regulatory initiatives related to supplier security and third-party risk management. \nStaying informed of emerging cyber threats, vulnerabilities, industry trends, and regulatory developments that may impact supplier security risk exposure. \nContributing to executive and operational reporting regarding third-party security posture, risks, and remediation progress.\n You have:\nMinimum 4 to 8 years of experience in cybersecurity, information security, risk management, audit, compliance, or third-party risk management. \nStrong understanding of third-party risk management principles, supplier security assurance, and security governance practices.\nExperience conducting security assessments, control reviews, or risk evaluations in enterprise environments.\nStrong understanding of information security controls and common security domains, including access management, vulnerability management, incident management, data protection, and cloud security.\nKnowledge of security and risk management frameworks such as ISO/IEC 27001, ISO/IEC 27002, ISO 31000, NIST Cybersecurity Framework, CIS Controls, COBIT, and similar industry standards. \nAbility to analyze security risks and communicate findings clearly to both technical and non-technical stakeholders. \nStrong analytical, problem-solving, and critical-thinking capabilities. \nExcellent stakeholder management and collaboration skills.\nStrong written and verbal communication skills in English. \nMaster's degree in Cybersecurity, Information Technology, Computer Science, Engineering, Risk Management, or related discipline. \nIt Would Be Nice If You Also Had\nExperience working with supplier security assessment platforms and GRC solutions.\nKnowledge of cloud security concepts and security assessments of SaaS, PaaS, and IaaS providers.\nExperience in telecommunications, technology, or large multinational organizations.\nKnowledge of data protection and privacy requirements affecting third-party engagements.\nRelevant certifications such as CISSP, CISM, CRISC, ISO 27001 Lead Implementer/Auditor, or equivalent. \nExperience working in global, matrixed organizations. \nYou Are\nA trusted security professional with a strong risk-management mindset.\nCustomer-focused and capable of building constructive relationships with internal and external stakeholders. \nHighly organized, self-motivated, and proactive.\nComfortable managing multiple assessments and priorities simultaneously.\nAn effective communicator who can translate technical risks into business-relevant recommendations. \nA collaborative team player who works effectively across diverse and virtual teams. \nFocused on delivering practical, sustainable, and risk-based security outcomes.","description_format":"text","description_chars":5790,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"master","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Mobile Networks","Information Security","Network Equipment","Optical Communications"],"lifecycle":[{"event":"open","at":"2026-10-20T13:27:59Z"}],"visa":[],"liveness":{"score":78,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.867,"p_room":0.9,"age_days":3,"expected_fill_days":7,"reasons":["conf:3","velocity","win:mid","comp:brand"],"computed_at":"2026-10-24T06:02:35Z"},"pay":null,"html_url":"https://alion.io/job/nokia-third-party-security-analyst","json_url":"https://alion.io/job/nokia-third-party-security-analyst.json","meta":{"generated_at":"2026-10-25T00:39:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":983,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":17345},"rest":"https://alion.io/mcp/rest/get_company?id=17345"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnokia-third-party-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnokia-third-party-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnokia-third-party-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nokia-third-party-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnokia-third-party-security-analyst"}]}