Assoc. Dir. DDIT ISC Risk Governance & Enablement

Novartis AG; Barcelona; On-site; EUR 58,000 - 108,000; Full time

Benefits offered by this job

Insurance plans

Retirement plans

Wellbeing resources

Global recognition programs

Flexible and hybrid working

Parental leave 14 weeks

Job summary

Novartis AG in Barcelona seeks an Associate Director for DDIT ISC Risk Governance & Enablement to define, govern and continuously improve enterprise risk, issues and exceptions. You will establish governance, enable capabilities through processes, data and automation, and drive transparent, risk-based decision making.

Working with global stakeholders, you will lead governance frameworks, tool evaluation, and optimization, aiming for simpler, standardized practices and responsible AI oversight.

Qualifications

• University degree in information technology, information security, risk management, business administration, engineering or related field.
• Postgraduate qualification or professional certification is an advantage.
• Significant experience in technology or enterprise risk management, information security or governance.

Responsibilities

• Define and improve DD&IT risk, issue and exception governance processes.
• Establish governance frameworks with clear roles, accountability and escalation.
• Manage lifecycle of risks, issues, exceptions, controls and remediation actions.
• Ensure timely identification, assessment, monitoring, reporting and closure with auditability.
• Drive escalation of material risks to governance bodies and enable standardized processes.
• Evaluate and optimize tools, workflows and technology solutions; enable automation and AI responsibly.
• Develop risk data, metrics and insights to support informed decisions.

Skills

Fluent English

Education

University degree in IT / information security / risk management

Postgraduate qualification or relevant professional certification (advantage)

Job description

Summary The Associate Director DDIT ISC Risk Governance & Enablement is accountable for defining, governing and continuously improving the enterprise processes and enabling capabilities for managing DD&IT risks, issues and exceptions.

Summary The Associate Director DDIT ISC Risk Governance & Enablement is accountable for defining, governing and continuously improving the enterprise processes and enabling capabilities for managing DD&IT risks, issues and exceptions. The role establishes simple, consistent and effective governance across DD&IT and enables its adoption through fit-for-purpose processes, technology, automation, artificial intelligence, data and insights. The role evaluates existing processes and tools and drives sustainable improvements that strengthen transparency, accountability, user experience and risk-based decision-making. Working in close collaboration with stakeholders across DD&IT, ISC and other relevant Novartis functions, the role ensures that risk governance processes and enabling capabilities remain aligned with applicable Novartis requirements, external standards and regulatory requirements, evolving business needs and DD&IT strategic priorities.

About The Role

Key Responsibilities :

• Define and continuously improve DD&IT risk, issue, and exception governance processes aligned with policies, standards, and regulatory requirements.
• Establish clear governance frameworks, including roles, accountabilities, decision rights, approvals, and escalation paths.
• Manage the lifecycle and relationships between risks, issues, exceptions, controls, and remediation actions.
• Ensure effective identification, assessment, monitoring, reporting, renewal, and closure with strong auditability and transparency.
• Drive timely escalation of material risks and systemic concerns to appropriate governance bodies.
• Lead process simplification, standardization, harmonization, and continuous improvement across DD&IT risk governance.
• Evaluate and optimize tools, workflows, and technology solutions, including integration, consolidation, and modernization initiatives.
• Identify and implement automation and responsible AI opportunities while ensuring appropriate oversight, security, traceability, and accountability.
• Define and enhance risk data, metrics, analytics, reporting, and actionable insights to support informed decision‑making.
• Drive stakeholder adoption, capability building, and cross-functional collaboration to strengthen risk governance, automation, and process excellence across DD&IT.

Essential Requirement

• University degree in information technology, information security, risk management, business administration, engineering or another relevant discipline; postgraduate qualification or relevant professional certification is an advantage.
• Significant relevant experience in technology or enterprise risk management, information security, compliance governance, process management, digital enablement or a related field.
• Demonstrated experience defining or improving enterprise governance frameworks and cross-functional processes and translating requirements into practical, sustainable capabilities.
• Experience evaluating enterprise tools, workflows or technology-enabled processes and driving process simplification, continuous improvement and sustainable adoption.
• Understanding of automation, data analytics and AI-enabled ways of working, including responsible human oversight.
• Experience operating in a global, matrixed and regulated organization and influencing senior stakeholders without direct authority.

Desirable Requirement

• Enterprise mindset, strategic and systems thinking, sound judgment, constructive challenge, cross-functional collaboration, learning agility and accountability.
• Fluent written and spoken English; additional languages are an advantage.

Benefits & Rewards

At Novartis, we’re committed to reimagining medicine together - and rewarding the people who make it happen.

Expected Annual Base Salary Range for role: 57,900.00 - 107,500.00 EUR

The base salary offered is determined based on gender-neutral objectives, such as relevant skills, competencies and experience in accordance with the Novartis pay setting policy and upon joining Novartis will be reviewed periodically.

In addition to your base salary, you may be eligible for a performance-based bonus depending on certain performance parameters.

The rewards of being part of our team go far beyond base pay and incentives. We also offer a variety of competitive benefits in kind to help you thrive personally and professionally, such as insurance plans, retirement plans, wellbeing resources and global recognition programs. In addition, we provide flexible and hybrid working options, where possible, and minimum 14 weeks paid parental leave.

Read our brochure to learn more about our global total rewards offering:

https://www.novartis.com/sites/novartis_com/files/novartis-life-handbook.pdf

Note: Benefits and compensation may vary by country and are subject to local legal requirements, including provisions of collective bargaining agreements where applicable. A full overview of your compensation package, including any relevant collective bargaining agreement details applicable to your role based on your employment location and Novartis employer entity, will be communicated separately to you during the application process.

Commitment to Diversity & Inclusion

Novartis is committed to building an outstanding, inclusive work environment and diverse teams representative of the patients and communities we serve.

Why Novartis:

Helping people with disease and their families takes more than innovative science. It takes a community of smart, passionate people like you. Collaborating, supporting and inspiring each other. Combining to achieve breakthroughs that change patients’ lives. Ready to create a brighter future together? https://www.novartis.com/about/strategy/people-and-culture

Benefits and Rewards:

Learn about all the ways we’ll help you thrive personally and professionally.

Read our handbook (PDF 30 MB)