Assoc. Dir. DDIT ISC Risk Governance & Enablement

Novartis; Sabadell; Hybrid; EUR 58,000 - 108,000; Full time

Benefits offered by this job

Insurance plans

Retirement plans

Wellbeing resources

Global recognition programs

Hybrid working options

14 weeks paid parental leave

Job summary

Novartis is seeking an Associate Director for DDIT ISC Risk Governance & Enablement in a hybrid role spanning Spain. You will define and continuously improve enterprise risk governance, enable capability development, and oversee tools and processes across DD&IT with strong collaboration across functions.

Responsibilities include establishing governance frameworks, driving risk remediation, and promoting data-driven decision-making while integrating responsible AI and automation within compliant,

Qualifications

• University degree in a relevant field; postgraduate qualification or professional cert is an advantage.
• Significant experience in technology or enterprise risk management, information security, or related fields.
• Experience defining or improving enterprise governance frameworks and cross-functional processes.

Responsibilities

• Define and improve DD&IT risk governance processes in line with policies and regulatory requirements.
• Establish governance frameworks with clear roles, ownership and escalation paths.
• Manage lifecycle of risks, issues, and remediation actions with auditability and transparency.
• Lead simplification and standardization across DD&IT risk governance and enablement.
• Identify automation and AI-enabled opportunities with appropriate oversight and security.

Skills

Risk governance

Information security

Process management

Automation

Data analytics

AI-enabled

Stakeholder collaboration

Job description

Salary Range

€57,900.00 - €107,500.00

Job Description Summary

The Associate Director DDIT ISC Risk Governance & Enablement is accountable for defining, governing and continuously improving the enterprise processes and enabling capabilities for managing DD&IT risks, issues and exceptions. The role establishes simple, consistent and effective governance across DD&IT and enables its adoption through fit‑for‑purpose processes, technology, automation, artificial intelligence, data and insights. The role evaluates existing processes and tools and drives sustainable improvements that strengthen transparency, accountability, user experience and risk‑based decision‑making. Working in close collaboration with stakeholders across DD&IT, ISC and other relevant Novartis functions, the role ensures that risk governance processes and enabling capabilities remain aligned with applicable Novartis requirements, external standards and regulatory requirements, evolving business needs and DD&IT strategic priorities.

Job Description

Key Responsibilities

• Define and continuously improve DD&IT risk, issue, and exception governance processes aligned with policies, standards, and regulatory requirements.
• Establish clear governance frameworks, including roles, accountabilities, decision rights, approvals, and escalation paths.
• Manage the lifecycle and relationships between risks, issues, exceptions, controls, and remediation actions.
• Ensure effective identification, assessment, monitoring, reporting, renewal, and closure with strong auditability and transparency.
• Drive timely escalation of material risks and systemic concerns to appropriate governance bodies.
• Lead process simplification, standardization, harmonization, and continuous improvement across DD&IT risk governance.
• Evaluate and optimize tools, workflows, and technology solutions, including integration, consolidation, and modernization initiatives.
• Identify and implement automation and responsible AI opportunities while ensuring appropriate oversight, security, traceability, and accountability.
• Define and enhance risk data, metrics, analytics, reporting, and actionable insights to support informed decision‑making.
• Drive stakeholder adoption, capability building, and cross‑functional collaboration to strengthen risk governance, automation, and process excellence across DD&IT.

Essential Requirement

• University degree in information technology, information security, risk management, business administration, engineering or another relevant discipline; postgraduate qualification or relevant professional certification is an advantage.
• Significant relevant experience in technology or enterprise risk management, information security, compliance governance, process management, digital enablement or a related field.
• Demonstrated experience defining or improving enterprise governance frameworks and cross‑functional processes and translating requirements into practical, sustainable capabilities.
• Experience evaluating enterprise tools, workflows or technology‑enabled processes and driving process simplification, continuous improvement and sustainable adoption.
• Understanding of automation, data analytics and AI‑enabled ways of working, including responsible human oversight.
• Experience operating in a global, matrixed and regulated organization and influencing senior stakeholders without direct authority.

Desirable Requirement

• Enterprise mindset, strategic and systems thinking, sound judgment, constructive challenge, cross‑functional collaboration, learning agility and accountability.
• Fluent written and spoken English; additional languages are an advantage.

Benefits & Rewards

At Novartis, we're committed to reimagining medicine together - and rewarding the people who make it happen.

Expected Annual Base Salary Range for role: 57,900.00 - 107,500.00 EUR

The base salary offered is determined based on gender‑neutral objectives, such as relevant skills, competencies and experience in accordance with the Novartis pay setting policy and upon joining Novartis will be reviewed periodically.

In addition to your base salary, you may be eligible for a performance‑based bonus depending on certain performance parameters.

The rewards of being part of our team go far beyond base pay and incentives. We also offer a variety of competitive benefits in kind to help you thrive personally and professionally, such as insurance plans, retirement plans, wellbeing resources and global recognition programs. In addition, we provide flexible and hybrid working options, where possible, and minimum 14 weeks paid parental leave.

Read our brochure to learn more about our global total rewards offering: https://www.novartis.com/sites/novartis_com/files/novartis-life-handbook.pdf

Note: Benefits and compensation may vary by country and are subject to local legal requirements, including provisions of collective bargaining agreements where applicable. A full overview of your compensation package, including a