Enterprise Data Security Architect - PQC & Data Protection

Novartis España; Barcelona; Hybrid; EUR 150,000 - 190,000; Full time

Job summary

Novartis España in Barcelona seeks an Enterprise Security Architect – Data Security to design and implement security controls for Data Security across the IT landscape. You will collaborate with Enterprise Architects and functional security teams to ensure Digital Workspace compliance with policies, standards, and industry best practices.

Responsibilities include developing data security architecture, PKI and PQC considerations, and overseeing cryptography, key management, and regulatory

Qualifications

• University degree in business/technical area or comparable education/experience.
• 15+ years of working experience in Security domain; minimum 5 years in architecture capacity.
• 5+ years of experience with IT services in large enterprises.

Responsibilities

• Develop and enforce security policies and procedures for Data Security across Novartis businesses.
• Design Data Security architecture for the IT landscape in line with policy framework.
• Lead PQC readiness program and oversee cryptography-related strategies.
• Support technology standards and controls related to Data Security in collaboration with stakeholders.
• Develop and maintain Data Security architecture diagrams and documentation.

Skills

Security architecture

Data Security

Digital Workspace

Network Security

Identity and Access Management

SIEM

Vulnerability Management

Cryptography concepts

Post-Quantum Cryptography (PQC)

Leadership & communication

Education

University degree in business/technical field

Tools

HSM/KMS

PKI architectures

NIST standards

Job description

Novartis España in Barcelona seeks an Enterprise Security Architect – Data Security to design and implement security controls for Data Security across the IT landscape. You will collaborate with Enterprise Architects and functional security teams to ensure Digital Workspace compliance with policies, standards, and industry best practices.

Responsibilities include developing data security architecture, PKI and PQC considerations, and overseeing cryptography, key management, and regulatory