Head of AI-Driven Secure SDLC & Enterprise Governance

Novartis; Barcelona; Híbrido; EUR 93.000 - 172.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Insurance plans

Retirement plans

Wellbeing resources

Global recognition programs

Hybrid working options

14 weeks parental leave

Descripción de la vacante

Novartis Barcelona is seeking a hands-on software engineering leader to own the enterprise SDLC governance model, build policy as code, automated evidence pipelines and control instrumentation. You will influence hundreds of engineers, drive cross‑functional alignment with quality, security and auditors, and push AI-enabled tooling for rapid, compliant software delivery.

Expect 10+ years of relevant experience, deep knowledge of regulated software requirements, and a propensity to operate across

Formación

• 10+ years in software engineering, platform engineering, DevSecOps or engineering quality.
• Experience designing and operating automated controls in regulated environments with evidence of replacing manual compliance work with software.
• Excellent written English.
• Knowledge of GxP, GAMP 5, 21 CFR Part 11, EU Annex 11 and data integrity/ALCOA+.

Responsabilidades

• Own the enterprise policy, standards and controls for software engineering, including source control, branching, peer review, testing, release management, environment segregation, change control, configuration and release documentation.
• Rationalise overlapping GxP, SOX, privacy, security and IT-quality requirements into one coherent, risk-based framework.
• Retire SDLC controls that do not reduce risk and ensure tooling speeds up software development at scale with AI tooling, securely.
• Implement policy as code and controls as code, including branch protections, mandatory review, signed commits, segregation of duties and immutable audit trails.
• Build automated, continuous evidence pipelines and define control telemetry (coverage, exceptions, drift, MTTR, control effectiveness).
• Define AI-related controls for engineering and products, including model lifecycle, dataset documentation, explainability and human oversight.
• Lead a federated community of engineering, quality, security and compliance practitioners, advising senior leaders and partnering with developers to enable compliant delivery.

Conocimientos

Hands-on software engineering

CI/CD pipelines

Policy as code

Automated controls design

AI governance in SDLC

Influence without authority

English writing

Herramientas

Git-based platforms

Policy engines (OPA/Rego)

Container orchestration

Cloud platforms

Infrastructure as Code (IaC)

SBOM and signing tooling

Descripción del empleo

Novartis Barcelona is seeking a hands-on software engineering leader to own the enterprise SDLC governance model, build policy as code, automated evidence pipelines and control instrumentation. You will influence hundreds of engineers, drive cross‑functional alignment with quality, security and auditors, and push AI-enabled tooling for rapid, compliant software delivery.

Expect 10+ years of relevant experience, deep knowledge of regulated software requirements, and a propensity to operate across