M&A Information Security Lead: Due Diligence & Day-1

Novartis AG; Insurgentes; Hybrid; MXN 900,000 - 1,300,000; Full time

Job summary

Novartis AG is seeking an Associate Director DDIT ISC FM&A Compliance based in Mexico City. The role focuses on providing information security expertise across the FM&A lifecycle, from due diligence to post-close remediation and divestitures as needed.

You will partner with Finance, Legal, Privacy and IT to identify material risks and enable secure deals at business speed, balancing security objectives with deal timelines and complex environments.

Qualifications

• 8+ years of experience in enterprise Information Security and Cybersecurity, including compliance, governance and controls.
• Ability to assess risk across applications, infrastructure, cloud, identity, data, AI tools and third parties.
• Strong analytical, investigative and critical-thinking skills with pragmatic risk-based decision making.

Responsibilities

• FM&A Information Security due diligence for acquisitions and targets.
• Translate security findings into business risk and actionable recommendations.
• Define security priorities and mitigations aligned with transaction timelines.
• Coordinate with FM&A, Legal, Privacy, Risk and Compliance for practical solutions.
• Explain complex security matters to executives clearly and concisely.

Skills

Enterprise Information Security

Cybersecurity

Compliance

Governance

Risk assessment

Stakeholder management

Executive communication

Job description

Novartis AG is seeking an Associate Director DDIT ISC FM&A Compliance based in Mexico City. The role focuses on providing information security expertise across the FM&A lifecycle, from due diligence to post-close remediation and divestitures as needed.

You will partner with Finance, Legal, Privacy and IT to identify material risks and enable secure deals at business speed, balancing security objectives with deal timelines and complex environments.