Salary Range:
Kč948,290.00 - Kč1,761,110.00Job Description Summary
-Supports the implementation of the information security. governance and strategy per the information management framework through business partneringJob Description
Key Responsibilities:
- Provide ISC governance/risk advice and support for Operations IT and OT Function and oversee a specific governance/risk area globally. Ensure IT/OT project risks are managed in line with ISC strategy, the policy framework, laws and regulations and industry standards.
- Ensure monitoring of information risk and proactive mitigation of issues. Continuous support risk-based treatment of threats, issues and vulnerabilities. Guide teams and support them in understanding the risk exposure and technical safeguards.
- Deliver global information governance programs like risk management, data classification, storage & transmission guidelines, audit readiness support, etc.
- Maintain strong knowledge of internal controls and internal risk and control frameworks/standards or the Information Management Policy Framework. Systematically support implementation and monitoring of the same.
- Provide KPI reporting, dashboards, and continuous improvements to ensure compliance.
- Analyse impact of new technologies and regulatory changes on information security considering Cyber Security and Data Privacy Acts, Laws, and Regulations
- Ensure good communication and collaboration with the Service Delivery Teams of the DDIT operations and other support partners. Share new ideas, be proactive and have desire to deliver business value.
- Leverage AI and automation to streamline compliance activities, including risk assessments, control documentation, testing, issue management, and audit support.
Essential Requirement:
- Over 8-10 years of experience in Business Information Security and Compliance; IT Risk management; Audit management’ Information Governance and Management
- Experience with Good Practice Quality guidelines and regulations (GxP)
- Experience with OT security compliance and implementing policies in manufacturing setup
- University degree in business/technical/scientific area or comparable education/experience
- Any one of the professional Information Security certifications (preferred), either from ISACA like CISM, CRISC, CISA and/or ISC2 like CISSP, CCSP, etc.
- Experience in stakeholder management (Senior Business Execs, IT Site Heads, etc.)
Desirable Requirement:
- Proficient in English (written and spoken)
Expected Annual Base Salary Range for role: 948,290.00 - 1,761,110.00 CZK
The base salary offered is determined based on gender-neutral objectives, such as relevant skills, competencies and experience in accordance with the Novartis pay setting policy and upon joining Novartis will be reviewed periodically.
In addition to your base salary, you may be eligible for a performance-based bonus depending on certain performance parameters.
The rewards of being part of our team go far beyond base pay and incentives. We also offer a variety of competitive benefits in kind to help you thrive personally and professionally, such as insurance plans, retirement plans, wellbeing resources and global recognition programs. In addition, we provide flexible and hybrid working options, where possible, and minimum 14 weeks paid parental leave.
Pay equity is a fundamental principle of our employment policy and reflects our commitment to create a diverse, equitable and inclusive environment that treats all employees with dignity and respect, as outlined in our Code of Ethics.
Read our brochure to learn more about our global total rewards offering: https://www.novartis.com/sites/novartis_com/files/novartis-life-handbook.pdf
Note: Benefits and compensation may vary by country and are subject to local legal requirements, including provisions of collective bargaining agreements where applicable. A full overview of your compensation package, including any relevant collective bargaining agreement details applicable to your role based on your employment location and Novartis employer entity, will be communicated separately to you during the application process.
Commitment to Diversity & Inclusion:
Novartis is committed to building an outstanding, inclusive work environment and diverse teams representative of the patients and communities we serve.
Accessibility and accommodation:
Novartis is committed to working with and providing reasonable accommodation to all individuals. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the recruitment process, or in order to receive more detailed information about the essential functions of a position, please send an email to [email protected] and let us know the nature of your request and your contact information. Please include the job requisition number in your message.
Skills Desired
Audits Compliance, Business Acumen, Communication, Compliance Management, Compliance Risk Management, Compliance Training, Influencing Skills, Operational Excellence (OpEx), Quality Assurance (QA)Skills Required
- Over 8–10 years of experience in business information security and compliance, IT risk management, audit management, or information governance and management
- Experience with Good Practice Quality guidelines and GxP regulations
- Experience with OT security compliance and policy implementation in a manufacturing environment
- University degree in a business, technical, or scientific field, or comparable education and experience
- Professional information security certification such as CISM, CRISC, CISA, CISSP, or CCSP
- Experience managing stakeholders including senior business executives and IT site heads
- Proficiency in written and spoken English
Novartis Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Novartis and has not been reviewed or approved by Novartis.
-
Healthcare Strength — Pay and benefits are described as a strong overall package, supported by medical, dental, and vision insurance alongside FSAs/HSAs and disability and life coverage. Mental-health support is reinforced through an employee assistance program with psychological support and a network of mental health first aiders.
-
Retirement Support — Retirement support is positioned as a standout element, with an automatic company contribution plus dollar-for-dollar matching in the 401(k). Additional retirement funding is described through an age-based defined contribution program and access to an employee share purchase plan discount.
-
Parental & Family Support — Family-related benefits are framed as robust, including a global minimum of paid parental leave for new parents following birth or adoption. Added supports include domestic partner coverage, dependent-care resources, and benefits such as adoption assistance and child/elder care options.
Novartis Insights
What We Do
Novartis is an innovative medicines company. Every day, working to reimagine medicine to improve and extend people’s lives so that patients, healthcare professionals and societies are empowered in the face of serious disease. Our medicines reach more than 250 million people worldwide.
