Head of SDLC Governance & Secure AI Delivery

ES06 (FCRS = ES006) Novartis Farmacéutica, S.A.; Barcelona; Híbrido; EUR 93 000 - 172 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Insurance plans

Retirement plans

Wellbeing resources

Global recognition programs

Flexible and hybrid working options

Resumo da oferta

Novartis is seeking a hands-on software engineering leader to own enterprise SDLC governance in a Barcelona-based role. You will build automated evidence pipelines, define policy as code, and drive secure, compliant software delivery at scale.

This is a hands-on, individual-contributor role focused on technical ownership with no large direct team, requiring 10+ years of experience and strong English writing skills; hybrid work in Barcelona offered.

Qualificações

• 10+ years in software engineering or related fields with delivery ownership.
• Experience designing automated controls in regulated environments.
• Fluency in regulated software requirements (GxP, 21 CFR Part 11, GDPR).
• Security engineering depth across application security and software supply chain.

Responsabilidades

• Own enterprise policy, standards and controls for software engineering.
• Rationalise GxP, SOX, privacy and IT-quality requirements into a risk-based framework.
• Retire SDLC controls that don't reduce risk and accelerate secure development.
• Implement policy as code with branch protections and immutable audit trails.
• Build automated evidence pipelines and control telemetry.
• Define AI governance for engineering and products; oversee model lifecycle.
• Lead federated communities across engineering, quality and security.

Conhecimentos

CI/CD pipelines

Policy as code

IaC

AI governance

Ferramentas

Git

OPA

Kubernetes

Cloud

SBOM signing

Descrição da oferta de emprego

Novartis is seeking a hands-on software engineering leader to own enterprise SDLC governance in a Barcelona-based role. You will build automated evidence pipelines, define policy as code, and drive secure, compliant software delivery at scale.

This is a hands-on, individual-contributor role focused on technical ownership with no large direct team, requiring 10+ years of experience and strong English writing skills; hybrid work in Barcelona offered.