Hybrid GRC & InfoSec Senior Analyst (Risk & Compliance)

Novartis; Durham (NC); Hybrid; USD 109,000 - 202,000; Full time

Job summary

Novartis in Durham, North Carolina, US, is seeking a GRC Compliance Senior Analyst to support information security, risk, and compliance across business applications, IT/OT services, and manufacturing sites. The role is hybrid with 3 days in office.

You will drive governance, risk management, audit readiness, and continuous improvement of security programs, collaborating with global teams and leveraging AI to streamline activities.

Qualifications

• 8+ years in Business Information Security and Compliance
• Knowledge of risk and control frameworks
• Ability to collaborate with cross-functional teams
• Experience with GxP regulations

Responsibilities

• Provide ISC governance/risk advice and support for Operations IT and OT Function
• Ensure monitoring of information risk and proactive mitigation of issues
• Deliver global information governance programs like risk management, data classification and audit readiness support
• Maintain knowledge of internal controls and risk frameworks
• Provide KPI reporting and dashboards for compliance
• Analyze impact of new technologies and regulatory changes on information security

Skills

GRC

Information Security

Risk Management

Stakeholder management

Audit Management

Compliance

Data Privacy

English Proficiency

Education

University degree in business/technical/scientific area

Job description

Novartis in Durham, North Carolina, US, is seeking a GRC Compliance Senior Analyst to support information security, risk, and compliance across business applications, IT/OT services, and manufacturing sites. The role is hybrid with 3 days in office.

You will drive governance, risk management, audit readiness, and continuous improvement of security programs, collaborating with global teams and leveraging AI to streamline activities.