Enterprise Security Architect – Data Security

Internal job title: Assoc. Dir. DDIT ISC Enterprise Security Architecture – Data Security

Responsibilities

• Develop and enforce security policies and procedures related to Data Security across Novartis to meet business and regulatory requirements.
• Design security measures and overall Data Security architecture for the IT landscape in line with the ISC policy framework.
• Act as technical lead for the PQC readiness program.
• Support and continually review technology standards and controls related to Data Security and recommend information technology strategies, policies, and procedures.
• Identify design problems within the Data Security domain.
• Support projects to evolve Data Security solutions from evaluation to implementation and assist delivery of the operational model.
• Support the auditing of security policies and procedures.
• Manage communication with key stakeholders and provide reports to management.
• Provide ongoing support to maintain the effectiveness and efficiency of the Data Security domain by defining, delivering, and supporting strategic plans for implementing information technologies.
• Maintain relationships with key stakeholders and vendors.
• Support the direction of technological research by learning organizational goals, strategies and business drivers.
• Develop and maintain architecture diagrams and documentation related to Data Security processes and procedures.

Qualifications

• University working and thinking level, degree in business or technical area or comparable education/experience.
• 15+ years of working experience in the Security domain; minimum 5 years in architecture capacity; 5+ years of experience in or providing IT services to a large enterprise.
• Exceptional understanding of security domains such as Digital Workspace, Data Protection, AI Security and knowledge of Network Security, Identity and Access Management, SIEM, Vulnerability Management.
• Strong understanding of core cryptography concepts (encryption, key exchange, hashing, digital signatures); solid PKI expertise.
• Clear understanding of Post‑Quantum Cryptography concepts and crypto‑agility principles.
• Experience designing data encryption architectures for data at rest and in transit.
• Knowledge of key management and HSM/KMS solutions.
• Familiarity with cryptographic standards and regulatory requirements such as NIST.
• Good knowledge of IT infrastructure technology, systems and management processes, and experience sourcing complex IT services with vendors.
• Proven experience to initiate and manage projects that affect corporate functions.
• Experience with compliance requirements (SOX, Gx Q/CSV, E‑compliance, Records Management, Privacy) and risk management standards (COSO, ISO 27001‑x, Cobi T, ISO 24762, BS 25999, NIST, ISF, ITIL).
• Strong leadership with excellent written and verbal communication and presentation skills at all organizational levels.

Desirable

• Understanding and experience with Enterprise Architecture Frameworks such as TOGAF.

Commitment to Diversity & Inclusion: We are committed to building an outstanding, inclusive work environment and diverse teams representative of the patients and communities we serve.

Accessibility and accommodation: Novartis is committed to working with and providing reasonable accommodation to all individuals.

If an accommodation is needed for any part of the recruitment process, please send an e‑mail to the recruitment team and let us know the nature of your request and your contact information, including the job requisition number.

#J-18808-Ljbffr