Senior GRC & InfoSec Compliance Analyst

Novartis; North Carolina; Hybrid; USD 109,000 - 202,000; Full time

Job summary

Novartis seeks a seasoned GRC Compliance Senior Analyst to support information security, risk, and governance across business applications, IT/OT services, and manufacturing sites in a hybrid Durham, NC environment. You will drive compliance programs and audit readiness while partnering with global teams.

With 8+ years in security and risk, you will guide controls, classifications, and policy adherence, leveraging AI to enhance efficiency.

Qualifications

• 8+ years in Business Information Security and Compliance, IT Risk, Audit management.
• University degree in business/technical/scientific area or comparable education/experience.
• Experience with managing risks, vulnerabilities and issues within the function; strong stakeholder engagement.

Responsibilities

• Provide ISC governance and risk advice for Operations IT and OT globally; oversee a governance/risk area.
• Monitor information risk and guide risk-based treatment of threats and vulnerabilities.
• Deliver global information governance programs: risk management, data classification, storage & transmission guidelines, audit readiness support.
• Maintain knowledge of internal controls and risk frameworks; support implementation and monitoring.
• Provide KPI reporting, dashboards, and continuous improvements to ensure compliance.
• Analyze impact of new technologies and regulatory changes on information security, including Cyber Security and Data Privacy laws.
• Communicate and collaborate with Service Delivery Teams and partners; drive business value.
• Leverage AI and automation to streamline compliance activities, including risk assessments and audit support.

Skills

InfoSec governance

Risk management

GRC

Stakeholder management

Strong communication

English proficiency

Education

Bachelor's degree or higher in business/technical/scientific field

Job description

Novartis seeks a seasoned GRC Compliance Senior Analyst to support information security, risk, and governance across business applications, IT/OT services, and manufacturing sites in a hybrid Durham, NC environment. You will drive compliance programs and audit readiness while partnering with global teams.

With 8+ years in security and risk, you will guide controls, classifications, and policy adherence, leveraging AI to enhance efficiency.