Risk Manager

• The Risk Manager will establish and lead Nokia Defense’s risk management function to identify, assess, and mitigate primarily security-related risks across the organization.
• The role owns the risk framework and registers, defines risk appetite, conducts risk assessments, and develops mitigation and business continuity and contingency plans.
• The position requires a university degree in risk management, at least 5 years’ risk experience in defense, and strong knowledge of ISO 31000/COSO and high-security regulatory requirements.
• This hybrid Espoo role (2–3 days/week) reports to the Director of Security, collaborates with Information Security, Personnel Security and senior management, and requires fluent Finnish and English.

Risk Manager establishes and leads Nokia Defense risk management function. This role is responsible for identifying, assessing, and mitigating primarily security related risks across the organization, while embedding a structured and proactive risk culture. Risk Manager also holds a coordinating role in Business Continuation Planning activities. 

You will work closely with leadership and cross-functional teams to ensure risks are managed effectively across operations, technology, compliance, and security.

Risk Manager reports to Director of Security and works closely with Information Security, Personnel Security and Senior Management.
 

This is a hybrid position requiring on-site presence at our Espoo office 2–3 days per week.

HOW YOU WILL CONTRIBUTE AND WHAT YOU WILL LEARN

• Establish and maintain the business unit’s risk management framework
• Identify and assess risks across operational and security areas
• Maintain risk registers and develop clear reporting for management
• Define risk appetite and support decision-making at leadership level
• Conduct risk assessments for projects, contracts, and new initiatives
• Develop and implement mitigation strategies and contingency plans
• Coordinate and support business continuity and crisis management processes
• Monitor emerging risks, including cyber and supply chain threats

   

KEY SKILLS AND EXPERIENCE

• University level degree in the field of Risk Management
• 5+ years of experience in risk management in defense or in defense business
• Strong experience in risk frameworks (ISO 31000, COSO ERM)
• Experience of regulatory and compliance requirements in high-security environments
• Experience in building and improving risk management processes
• Familiarity with operational risk
• Strong analytical and communication skills
• Ability to work independently in a fast-paced, evolving organization
• Fluent knowledge of Finnish and English.