Job Summary
As part of the Security Architecture & Advisory team, the Identity & Access Management (IAM) Security Architect will be responsible for the security of the design and implementations of Sandoz's IAM landscape. He will play a critical role in ensuring the confidentiality, integrity, and availability of our IAM systems and data, while also ensuring compliance with industry regulations and internal security policies.
Key Responsibilities
- Architect and design secure IAM solutions, such as SailPoint IdentityNow, MS Entra ID, CyberArk, SAP Identity Cloud Service, and SAP GRC, considering industry best practices, regulatory requirements, and organizational needs.
- Develop and enforce IAM security policies, standards, and procedures, ensuring compliance with internal and external security requirements.
- Conduct comprehensive security assessments of existing IAM solutions, identifying vulnerabilities and recommending appropriate remediation strategies.
- Provide guidance and support to development teams on secure IAM solution design, development, and configuration.
- Collaborate with other security architects and teams within the Information Security, Resilience & Compliance (ISRC) department to develop customized incident response plans for IAM security events and actively contribute to incident‑response activities as necessary.
- Advise stakeholders, management, and executives on IAM security.
- Develop and maintain strong relationships with key vendors and strategic external partners.
- Work collaboratively with product teams and key stakeholders to determine business and user requirements for end‑user devices.
Minimum Requirements
- University degree or equivalent experience in computer science, engineering, information technology or other relevant field(s).
- Fluent in written and spoken English.
- At least 8 years’ experience as an IAM Security Architect or in a similar role, focusing on securing systems with IAM solutions.
- Strong knowledge and direct experience of IAM solution design and integrations, including multi‑factor authentication, single sign‑on, identity management, identity federation, role management, PKI, and related technologies.
- Solid security architecture and engineering background.
- Excellent negotiation, communication, and interpersonal skills, with the ability to develop influential relationships with stakeholders across all levels.
- Experience working in a global company.
Preferred Requirements
- Knowledge and experience of industry standards such as NIST, ISO27001, CIS Controls, Cyber Essentials and legislative frameworks like GDPR and NIS.
- Certification or accreditation in Information Security (e.g., CISSP, CISM, CISA) and/or relevant vendor‑specific certifications.
Why Sandoz
Sandoz is a global leader in sustainable biosimilar and generic medicines, providing more than 900 million patient treatments across 100+ countries each year. We are investing in new development capabilities, production sites, acquisitions, and partnerships to shape the future of medicines. The culture is open, collaborative, and inclusive, supporting personal growth and flexible hybrid careers.