Security Frameworks Specialist

Ericsson Inc. does not sponsor US work authorizations for this job position including H-1B, O-1, and TN. Ericsson also does not hire F-1's working on EAD for this position.

About this opportunity:

Increasing regulatory demands and higher customer expectations of transparency and compliance requires that we constantly monitor and analyze the regulatory environment, influence the development of the regulations proactively and adjust our security frameworks (SRM, ISMS) as well our EGMS according to changes. This role focuses on ensuring Ericsson's security frameworks align with industry standards, regulations, and customer commitments. You will collaborate with security key stakeholders to integrate frameworks, support stakeholders, drive security-related projects, and address compliance issues. Success requires a degree in Information Security or a related field, experience in security frameworks, telecom security knowledge, and strong communication and teamwork skills.

What you'll do:

• Alignment with Industry Standards: Ensure that our security frameworks (SRM, ISMS) are aligned with industry standards, regulations, and contractual customer commitments, and conduct mapping with external frameworks to identify certification needs.

• Regulatory Engagement and Analysis: Stay actively involved in regulatory activities related to security, performing situation analyses to proactively influence developments and adjust our security frameworks accordingly.

• Collaboration and Alignment: Work closely with the Head of Security Policy and Standards, Head of Supply Chain Security Strategy, GFTL, and enterprise security to ensure collaboration and alignment on security objectives.

• Oversight of Regulatory Forums: Maintain oversight and inventory of critical regulatory, government, and policy-impacting forums, assessing their impact and defining strategies for influence.

• Stakeholder Support and Communication: Provide support to internal key stakeholders (GF, CU's, CSD's) on security framework questions and update product security policies, directives, and requirements as needed.

• Security Framework Projects and Compliance: Drive security framework-related projects and support in addressing non-compliances with Generic Product Requirement (GPR) and Baseline Security Requirement (BSR).

• Training and Team Collaboration: Develop awareness and training frameworks and assets, while actively collaborating and supporting within the team to foster a cohesive working environment.

Skills you'll bring:

• Bachelor's or Master's degree in Information Security, Computer Science, or a related field.

• Experience in information security, with a focus on security frameworks and risk management.

• Strong understanding of security frameworks.

• Understanding of telecom security legislation, regulations, and guidelines, particularly in the Americas region.

• Strong communication skills to articulate security framework updates and ensure alignment with internal key stakeholders.

• Experience in coordinating across different teams and departments to ensure understanding and cooperation.

• Strong collaborative skills to actively support and work within the team, fostering a cooperative environment.