N

Novartis

Global pharmaceutical company delivering science-based innovations

Assoc. Dir. DDIT ISC Risk Governance & Enablement

Security Governance, Risk & ComplianceUpdated on Nov 10
Full-timeBarcelona, Spain

About the Job

Requirements

  • A university degree in information technology, information security, risk management, business administration, engineering, or another relevant discipline is required.
  • Significant relevant experience in technology or enterprise risk management, information security, compliance governance, process management, digital enablement, or a related field is required.
  • Demonstrated experience defining or improving enterprise governance frameworks and cross-functional processes, and translating requirements into practical, sustainable capabilities, is required.
  • Experience evaluating enterprise tools, workflows, or technology-enabled processes and driving process simplification, continuous improvement, and sustainable adoption is required.
  • Understanding of automation, data analytics, and AI-enabled ways of working, including responsible human oversight, is required.
  • Experience operating in a global, matrixed, and regulated organization and influencing senior stakeholders without direct authority is required.

Responsibilities

  • Define and continuously improve DD&IT risk, issue, and exception governance processes aligned with policies, standards, and regulatory requirements.
  • Establish governance frameworks with clear roles, accountabilities, decision rights, approvals, and escalation paths.
  • Manage the lifecycle and relationships between risks, issues, exceptions, controls, and remediation actions.
  • Ensure effective identification, assessment, monitoring, reporting, renewal, and closure with strong auditability and transparency.
  • Drive timely escalation of material risks and systemic concerns to appropriate governance bodies.
  • Lead process simplification, standardization, harmonization, and continuous improvement across DD&IT risk governance.
  • Evaluate and optimize tools, workflows, and technology solutions, including integration, consolidation, and modernization initiatives.
  • Identify and implement automation and responsible AI opportunities while ensuring appropriate oversight, security, traceability, and accountability.
  • Define and enhance risk data, metrics, analytics, reporting, and actionable insights to support informed decision-making.
  • Drive stakeholder adoption, capability building, and cross-functional collaboration to strengthen risk governance, automation, and process excellence across DD&IT.

Desired Qualifications

  • A postgraduate qualification or relevant professional certification is advantageous.
  • Enterprise mindset, strategic and systems thinking, sound judgment, constructive challenge, cross-functional collaboration, learning agility, and accountability are desirable.
  • Fluent written and spoken English is desirable; additional languages are an advantage.

About the Company

Novartis

Global pharmaceutical company delivering science-based innovations

Novartis is a global pharmaceutical company that uses science-based innovations to develop treatments and improve patient outcomes worldwide. Its products are medicines developed through research and development to address various diseases, aiming to reach nearly 1 billion people. The company differentiates itself by large-scale investment in R&D, a global presence with a diverse workforce, and a clear mission to Reimagine Medicine, focusing on meeting the changing needs of patients. Its goal is to improve quality of life and extend life expectancy by delivering meaningful therapies through its research and development efforts.

Company size
10,001+
Company stage
IPO
Headquarters
Basel, Switzerland
Founded
1970

Recently Posted Jobs

Explore more opportunities at Novartis

See more jobs