Assoc. Dir. DDIT ISC Risk Governance & Enablement

ES06 (FCRS = ES006) Novartis Farmacéutica, S.A.; Sabadell; Híbrido; EUR 58.000 - 108.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Insurance plans

Retirement plans

Wellbeing resources

Global recognition programs

Hybrid working options

14 weeks parental leave

Descripción de la vacante

Novartis Farmacéutica, S.A. in Spain is seeking an Associate Director DDIT ISC Risk Governance & Enablement to define and govern enterprise risk processes, enable capabilities with automation and AI, and ensure adherence to Novartis requirements across DD&IT.

You will lead cross-functional governance, drive improvements, evaluate tools, and deliver data-driven insights to inform decisions in a hybrid setup that supports work-life balance and global collaboration.

Formación

• University degree in IT, information security, risk management, business administration, engineering or a related discipline.
• Significant experience in technology or enterprise risk management, information security or governance.
• Experience defining or improving enterprise governance frameworks and cross-functional processes.

Responsabilidades

• Define and continuously improve DD&IT risk, issue, and exception governance processes.
• Establish governance frameworks including roles, accountability, and escalation paths.
• Manage lifecycle of risks, issues, exceptions, controls and remediation actions.
• Ensure identification, assessment, monitoring, reporting and auditability of risks and controls.
• Drive automation, AI opportunities and stakeholder adoption across DD&IT governance.

Conocimientos

Information Security Risk Management

IT Governance

Stakeholder Management

Business Acumen

Influencing Skills

Educación

University degree in IT / information security / risk management or related field

Descripción del empleo

Salary Range: €57,900.00 - €107,500.00

Job Description Summary

The Associate Director DDIT ISC Risk Governance & Enablement is accountable for defining, governing and continuously improving the enterprise processes and enabling capabilities for managing DD&IT risks, issues and exceptions. The role establishes simple, consistent and effective governance across DD&IT and enables its adoption through fit-for-purpose processes, technology, automation, artificial intelligence, data and insights. The role evaluates existing processes and tools and drives sustainable improvements that strengthen transparency, accountability, user experience and risk-based decision-making. Working in close collaboration with stakeholders across DD&IT, ISC and other relevant Novartis functions, the role ensures that risk governance processes and enabling capabilities remain aligned with applicable Novartis requirements, external standards and regulatory requirements, evolving business needs and DD&IT strategic priorities.

Job Description Key Responsibilities

• Define and continuously improve DD&IT risk, issue, and exception governance processes aligned with policies, standards, and regulatory requirements.
• Establish clear governance frameworks, including roles, accountabilities, decision rights, approvals, and escalation paths.
• Manage the lifecycle and relationships between risks, issues, exceptions, controls, and remediation actions.
• Ensure effective identification, assessment, monitoring, reporting, renewal, and closure with strong auditability and transparency.
• Drive timely escalation of material risks and systemic concerns to appropriate governance bodies.
• Lead process simplification, standardization, harmonization, and continuous improvement across DD&IT risk governance.
• Evaluate and optimize tools, workflows, and technology solutions, including integration, consolidation, and modernization initiatives.
• Identify and implement automation and responsible AI opportunities while ensuring appropriate oversight, security, traceability, and accountability.
• Define and enhance risk data, metrics, analytics, reporting, and actionable insights to support informed decision-making.
• Drive stakeholder adoption, capability building, and cross-functional collaboration to strengthen risk governance, automation, and process excellence across DD&IT.

Essential Requirements

• University degree in information technology, information security, risk management, business administration, engineering or another relevant discipline; postgraduate qualification or relevant professional certification is an advantage.
• Significant relevant experience in technology or enterprise risk management, information security, compliance governance, process management, digital enablement or a related field.
• Demonstrated experience defining or improving enterprise governance frameworks and cross-functional processes and translating requirements into practical, sustainable capabilities.
• Experience evaluating enterprise tools, workflows or technology-enabled processes and driving process simplification, continuous improvement and sustainable adoption.
• Understanding of automation, data analytics and AI-enabled ways of working, including responsible human oversight.
• Experience operating in a global, matrixed and regulated organization and influencing senior stakeholders without direct authority.

Desirable Requirements

• Enterprise mindset, strategic and systems thinking, sound judgment, constructive challenge, cross-functional collaboration, learning agility and accountability.
• Fluent written and spoken English; additional languages are an advantage.

Benefits & Rewards

• At Novartis, we’re committed to reimagining medicine together - and rewarding the people who make it happen.
• Expected Annual Base Salary Range for role: 57,900.00 - 107,500.00 EUR.
• The base salary offered is determined based on gender-neutral objectives, such as relevant skills, competencies and experience in accordance with the Novartis pay setting policy and upon joining Novartis will be reviewed periodically.
• In addition to your base salary, you may be eligible for a performance-based bonus depending on certain performance parameters.
• The rewards of being part of our team go far beyond base pay and incentives.
• We also offer a variety of competitive benefits in kind to help you thrive personally and professionally, such as insurance plans, retirement plans, wellbeing resources and global recognition programs.
• In addition, we provide flexible and hybrid working options, where possible, and minimum 14 weeks paid parental leave.
• Read our brochure to learn more about our global total rewards offering: https://www.novartis.com/sites/novartis_com/files/novartis-life-handbook.pdf
• Note: Benefits and compensation may vary by country and are subject to local legal requirements, including provisions of collective bargaining agreements where applicable.
• A full overview of your compensation package, including any relevant collective bargaining agreement details applicable to your role based on your employment location and Novartis employer entity, will be communicated separately to you during the application process.

Commitment to Diversity & Inclusion

Novartis is committed to building an outstanding, inclusive work environment and diverse teams representative of the patients and communities we serve.

Skills Desired

• Business Acumen
• Influencing Skills
• Information Security Risk Management
• IT Governance
• Stakeholder Management

Improving the lives of people living with disease takes more than innovative science. It takes a focus on the needs of people and a community committed to meeting them. It takes a team of people like you. Working together. Learning together. Thriving together. Discover how you can join us in changing people’s lives.

Novartis is aware of employment scams which make false use of our company name or leader’s names or recruiter’s names to defraud job seekers. Novartis does not make job offers without interview and never asks candidates for money. If you have encountered a job posting or been approached with a job offer that you suspect may be fraudulent, we strongly recommend you do not respond, send money or personal information. Novartis is not responsible for any claims, losses, damages, or expenses resulting from scams.

In the context of China Cross-Border Data Transfer (CBDT) policy, if you need to apply for a position in China, please go to the local Recruiting System TaleNov.