Head Of Security

• Aug 2018 - Present

Security

• Aug 2012 - Aug 2018

Senior Security Architect / Manager at Nokia

• Dec 2008 - Oct 2012

Senior Security Architect / Manager: Main responsibilities: • Owner of security for Symbian Devices platform security. • Planning the Security roadmap and the managing its implementation. • Certification and pre-sales work on SD devices towards governmental and operator entities, in effect establishing sales channels. • Liaising and cooperation with Ficora (Finnish Communications Regulatory Authority) and Interpol on a need basis. • Business continuity planning and management and disaster recovery • Solution management for 3rd parties: Managing and facilitating the integration of 3rd party solution into Nokia Symbian devices. This includes the due diligence and screening process. • Proactively addressing security issues. • Defining and communication of Nokia security policy in SD organization. • Presenting security related issues to the leadership team and other relevant stake holders. • Preparation of communications statements to Symbian Devices Leadership Team. • Handling communication with internal and external stakeholders (Legal, Comms, Markets, etc.). • Management of Incident handling: Management of RnD task force teams in urgent, high priority incident handling cases. • Driving needed security related development proposals (technical, RnD development processes, and managing resources). • DRM compliance and liability. • Driving the ecosystem development and planning for 3rd party developers and operators (W3C/OMTP/ BONDI/ JIL/ WAC). • Release management: Management and coordination of cross functional virtual asset teams when security changes were published into the main code line. • Distributing changes to the relevant parties, coordination, overseeing and management of needed changes in the teams and product code lines. • General understanding of the business directions, trends, vendors and their strategic business impact in regard to security and 3rd party developers. • Security community work and Security training

SW Engineer

• 2004 - 2008

Driving, and coordination of RnD and security related projects, coordination of HW vendors, requirements management. Development and leading the execution of security testing for platform wide audit trail procedure for Nokia Networks: • Defining mandatory security requirements for products. The main sources for the requirements were 3GPP 33 series standards, ISO 17799/27001 and customer requirements. • Defining mandatory testing tools to be used and creating a sample test plan. • Secure coding guidelines and recommendations on source code scanners and data mining tools etc. • Conducted security audit with independent third parties and documented the platform security architecture of our product: • Network component (Firewalls, routers & segmentation) hardening • Penetration testing and vulnerability scanning • Technical compliance scanning • Incident response plan and procedures • Governance and Policies In more detail: • Managing requirements: negotiation and coordination of requirements with customers and other stake holders. • Communication with major customer on pilot product forecast and status. • Management of the improvement and maintenance of testing processes. • Acceptance testing (requirements and test case design + implementation and test automation). • Management and designing of, testing (system integration and verification), porting, and developing further existing components according to new customer requirements. • Management and coordination of OS specific configuration in a heavily embedded environment with multiple supported HW platforms and operating systems (custom OS binaries, images, HW board, processor + cpu sw, u-boot, and protocols like IPSec + own high availability OS level implementations). • Part taking in source code, design specifications, security design and module test plan reviews for system verification and integration testing. • Customer support and generation of technical user documentation.

Technical Sales Support

• Aug 2003 - Apr 2004

Technical support to sales, coordination and participating in sales work towards German and Austrian customers. Technical support to sales, coordination and participating in sales work towards German and Austrian customers.

Maintenance and technical support

• May 2002 - Nov 2002

Maintenance/technical support of office network and computers. Engagement of market survey that charted the domestic providers of MMS-services. Maintenance/technical support of office network and computers. Engagement of market survey that charted the domestic providers of MMS-services.

sw specialist

• Mar 2002 - Apr 2002

Driving and managing the development work of the PowerMaint project. Driving and managing the development work of the PowerMaint project.

sw specialist

• May 2001 - Aug 2001

PowerMaint OS specialist in Germany Burghausen. The PowerMaint project entailed the implementation and execution of the new PowerMaint operating system that was designed to simplify the usage of the logistic chain, and enables coherent planning and execution of maintenance work of the power plant. PowerMaint OS specialist in Germany Burghausen. The PowerMaint project entailed the implementation and execution of the new PowerMaint operating system that was designed to simplify the usage of the logistic chain, and enables coherent planning and execution of maintenance work of the power plant.