Strategic ISC Cyber Defense Lead — AI and Compliance

Novartis AG; Sabadell; Hybrid; EUR 58,000 - 108,000; Full time

Job summary

Novartis AG in Barcelona, Spain, is seeking an experienced information security lead to drive country-specific cybersecurity compliance, advisory, and risk management initiatives. You will collaborate with SOC and cyber defense teams to improve detection capabilities and awareness programs.

With 8+ years in information security, you will translate regulatory requirements into practical controls, oversee audits, and guide stakeholders on secure practices while advancing AI-enabled security

Qualifications

• 8+ years of information security experience with governance, regulatory compliance, risk management or advisory.
• Experience implementing cybersecurity requirements in multinational environments, including NIS2 or similar.
• Familiarity with ISO 27001, NIST CSF and related controls.
• Ability to translate requirements into practical security measures for complex environments.
• Stakeholder management and ability to explain security to non-technical audiences.
• Hands-on with generative AI and AI coding assistants for rapid prototyping and automation.

Responsibilities

• Drive country-specific cybersecurity, privacy and AI regulations compliance.
• Advise business stakeholders on security policies, controls, and secure practices.
• Support audits, inspections, and certifications with evidence and remediation.
• Manage country-level security risks and incidents with SOC and cyber defense teams.
• Design security awareness programs including phishing simulations and campaigns.
• Leverage AI and low-code tools to streamline compliance and reporting.
• Collaborate across ISC, DDIT and business units for regulatory initiatives.
• Assess AI security risks including data exposure and prompt injection.

Skills

Information security governance

Cybersecurity regulatory compliance

Security risk management

Security advisory

AI and automation in security

Security awareness training

Incident response collaboration

Tools

Microsoft Defender XDR

Microsoft Sentinel

Kusto Query Language (KQL)

Job description

Novartis AG in Barcelona, Spain, is seeking an experienced information security lead to drive country-specific cybersecurity compliance, advisory, and risk management initiatives. You will collaborate with SOC and cyber defense teams to improve detection capabilities and awareness programs.

With 8+ years in information security, you will translate regulatory requirements into practical controls, oversee audits, and guide stakeholders on secure practices while advancing AI-enabled security