Novartis

Job Description Summary

The Information Security & Compliance team is looking for a highly skilled and experienced Business Information Security Expert to join our team. The successful candidate will be responsible for ensuring Information Security Compliance across our organization. This role requires a deep understanding of information security principles, risk management, and regulatory requirements, including HIPAA, GDPR, and GxP, technical knowledge in Data Analytics, Artificial Intelligence & Cloud Security & Compliance

Job Description

Your responsibilities include, but are not limited to:

• Develop, implement, and maintain information security policies, procedures, and guidelines to ensure compliance with industry standards and regulatory requirements.
• Conduct regular security assessments, audits, and risk analyses to identify vulnerabilities and ensure the effectiveness of security controls.
• Collaborate with various departments to ensure that information security requirements are integrated into business processes and projects.
• Provide expert guidance on information security best practices and emerging threats to senior management and other stakeholders.
• Lead incident response efforts and coordinate with internal and external teams to address security breaches and mitigate risks.
• Develop and deliver information security training and awareness programs to employees at all levels.
• Conduct regular Risk Committee Meetings and drive accountability & remediations.
• Conduct Annual Risk Identification Workshops to identify Risks, assign ownership and gain agreements on Remediation Plans and target dates.
• Stay up-to-date with the latest developments in information security, HIPAA, GDPR, and GxP regulatory requirements to ensure the organization remains compliant and secure.

Role Requirements:

• Bachelor's or Master's degree in Computer Science, Information Technology, or a related field.
• 12 - 16 years of experience in information security, with a focus on compliance, risk management, HIPAA, GDPR, and GxP.
• Data Analytics & Artificial Intelligence expertise
• Minimum of one certification among CISSP, CISA, CISM, CCSP.
• Strong knowledge of information security frameworks, standards, and regulations (e.g., ISO 27001, NIST, GDPR, HIPAA).
• Excellent analytical, problem-solving, and decision-making skills.
• Strong communication and interpersonal skills, with the ability to effectively convey complex security concepts to non-technical stakeholders.
• Proven ability to work independently and as part of a team in a fast-paced, dynamic environment.

Preferred Skills:

• Experience with security tools and technologies such as MS Azure, AWS, Data bricks, Data Analytics, and vulnerability management.
• Knowledge of cloud security principles and best practices.
• Experience in conducting security assessments and audits.
• Familiarity with data privacy regulations and requirements.

Skills Desired

Communication Skills, Compliance Audits, Compliance Management, Compliance Risk Assessment, Compliance Training, Influencing Skills, Quality Assurance