Hybrid Senior GRC & InfoSec Compliance Advisor

Novartis Group Companies; Durham (NC); Hybride; USD 109 000 - 202 000; Plein temps

Avantages offerts par ce poste

Health benefits (medical, dental, life

401(k) with company match

Generous time off

Résumé du poste

Novartis Group of Companies is seeking a GRC Compliance Senior Analyst to support information security, risk, and compliance across business applications, IT/OT services, and manufacturing sites. The role ensures alignment with security standards, regulatory requirements, and governance frameworks, driving continuous improvement and audit readiness.

The position requires 8+ years in security and compliance, strong stakeholder management, and excellent English.

Qualifications

• 8+ years of experience in business information security and compliance, IT risk management, and GRC.
• Experience managing risks, vulnerabilities and issues within the function.
• Strong stakeholder engagement with senior leadership and cross-functional teams.
• Excellent written and spoken English.

Responsabilités

• Provide ISC governance/risk advice and support for Operations IT and OT Function and oversee a governance/risk area globally.
• Monitor information risk and proactively mitigate issues; guide teams in risk exposure and safeguards.
• Deliver global information governance programs like risk management, data classification, storage & transmission guidelines, and audit readiness support.

Connaissances

GRC governance

Risk management

Stakeholder management

Communication

Information security

Formation

Bachelor's degree or equivalent

Outils

Audit management tools

Description du poste

Novartis Group of Companies is seeking a GRC Compliance Senior Analyst to support information security, risk, and compliance across business applications, IT/OT services, and manufacturing sites. The role ensures alignment with security standards, regulatory requirements, and governance frameworks, driving continuous improvement and audit readiness.

The position requires 8+ years in security and compliance, strong stakeholder management, and excellent English.