Senior GRC & InfoSec Compliance Lead

Novartis; Durham (CA); Hybrid; USD 109,000 - 202,000; Full time

Benefits offered by this job

Health benefits

Life insurance

Disability benefits

401(k) match

Generous PTO

Job summary

Novartis seeks a GRC Compliance Senior Analyst to support information security, risk, and compliance across business applications, IT/OT services, and manufacturing sites. You will ensure solutions meet security standards, regulatory requirements, and governance frameworks while driving continuous improvement and audit readiness.

The role requires 8+ years in information security, risk and governance with strong stakeholder engagement and English communication skills.

Qualifications

• 8+ years in Business Information Security and Compliance, IT Risk, and GRC.
• Strong governance, risk, and control experience with audits and regulatory alignment.
• Excellent written and spoken English with stakeholder engagement skills.

Responsibilities

• Provide ISC governance/risk guidance for Operations IT and OT globally.
• Monitor information risk and mitigate issues; support risk-based treatments.
• Deliver global information governance programs and audit readiness support.
• Maintain internal controls knowledge and monitor their implementation.
• Provide KPI reporting, dashboards, and continuous compliance improvements.
• Assess impact of new technologies and regulatory changes on information security.

Skills

GRC experience

Stakeholder mgmt

Risk & Audit

English proficiency

Education

Bachelor’s degree or equivalent

Job description

Novartis seeks a GRC Compliance Senior Analyst to support information security, risk, and compliance across business applications, IT/OT services, and manufacturing sites. You will ensure solutions meet security standards, regulatory requirements, and governance frameworks while driving continuous improvement and audit readiness.

The role requires 8+ years in information security, risk and governance with strong stakeholder engagement and English communication skills.