Associate Director, Global ISC Cyber Defense & AI Security

(FCRS = US014) Novartis Pharmaceuticals Corporation; Barcelona; Hybrid; EUR 58,000 - 108,000; Full time

Benefits offered by this job

Insurance plans

Retirement plans

Wellbeing resources

Global recognition programs

Flexible and hybrid working options

Minimum 14 weeks paid parental leave

Job summary

Novartis Pharmaceuticals Corporation in Barcelona, Spain, is seeking an experienced Information Security professional to lead country-specific cybersecurity, privacy, AI, and regulatory compliance initiatives. This hybrid role partners with ISC, SOC, and business functions to translate regulations into practical security measures and drive proactive risk management.

You will leverage AI and low-code tooling to streamline compliance, awareness, and reporting, assess AI-related risks, and support

Qualifications

• 8+ years in information security with governance, regulatory compliance, or risk management.
• Experience implementing cybersecurity or tech regulatory requirements in multinational environments, including NIS2 where applicable.
• Strong knowledge of ISO 27001, NIST CSF and related security control frameworks.
• Ability to translate security/regulatory requirements into practical solutions for complex environments.
• Excellent stakeholder management and the ability to explain complex topics clearly.

Responsibilities

• Drive implementation and ongoing compliance with country-specific cybersecurity, privacy, AI, and critical infrastructure regulations.
• Act as a trusted ISC advisor, guiding business and DDIT stakeholders on security policies, controls, and secure practices.
• Support cybersecurity audits, regulatory inspections, and certifications, including evidence preparation and remediation.
• Manage country-level security risks, issues, and incidents, collaborating with SOC, threat detection, incident response, and cyber defense teams.
• Design and deliver impactful security awareness and training programs, including phishing simulations and targeted campaigns.
• Use security behavior data to identify risks and develop targeted interventions.
• Coordinate regulatory, security, and country-specific initiatives across ISC, DDIT and business functions.
• Leverage AI, automation, low-code/no-code to streamline compliance, reporting, awareness, and security processes.

Skills

Information security

Security governance

Cybersecurity regulatory compliance

Security risk management

Security advisory

AI and automation

Security awareness

Phishing simulations

SOC collaboration

Incident response

Threat detection

Secure AI adoption

Data protection

Identity and access management

Prompt injection

Tools

Microsoft Sentinel

Microsoft Defender XDR

Kusto Query Language (KQL)

Power Platform

GitHub Copilot

Microsoft Copilot

Job description

Novartis Pharmaceuticals Corporation in Barcelona, Spain, is seeking an experienced Information Security professional to lead country-specific cybersecurity, privacy, AI, and regulatory compliance initiatives. This hybrid role partners with ISC, SOC, and business functions to translate regulations into practical security measures and drive proactive risk management.

You will leverage AI and low-code tooling to streamline compliance, awareness, and reporting, assess AI-related risks, and support