About the Role
Major accountabilities:
- Developing and maintaining security roadmaps and strategy, working with various other security domain architects to align technology and service roadmaps
- Driving new technology/product/solution evaluations, providing leadership in the identification of specific security technology standards for Public Cloud technologies
- Wearing the ‘engineering’ hat regularly, driving product/solution Proof of Concept with other security architects/engineers
- Identifying and leading your team to develop new security design patterns and participating on our Security Technical Design Authority
- Driving and defining required Threat Modeling methodologies & related tools for Cloud hosting environments
- Being our expert on Cloud and Infrastructure platform security topics and identifying major cloud security related deficiencies, then designing pragmatic approaches on how to remediate them at scale
- Reporting on cloud security posture status across company periodically and is responsible for maintaining a clear risk acceptance/remediation level
Minimum Requirements:
Work Experience:
- 8+ years of relevant professional IT experience in the related functional area, with a solid understanding of IT infrastructure technology, systems and management processes in a regulated industry
- 4+ years of experience as an Information Security Architect
- 2+ years experience working with AWS or Azure security architect (IaaS/PaaS)
- 2+ years working experience in DevOps/DevSecOps models
- Experience of sourcing complex IT services, working closely with vendors and making full use of their abilities
- Demonstrated ability to build and maintain successful relationships with senior leaders from risk or non-risk/IT or non-IT backgrounds and ability to successfully manage projects involving multi-functional teams in a matrixed environment
Nice to have:
- 5+ years of experience of working in or providing IT services to a large enterprise like Novartis
- Relevant certifications:
-Security related certifications: Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP),ISO 27001 Lead Implementer
- Technology related certification: AWS Certified Solutions Architect - Professional, AWS Certified Security - Specialty, Microsoft Certified: Azure Solutions Architect Expert
Languages :
- Proficiency in English (written & oral).
Role Requirements
Why Novartis: Helping people with disease and their families takes more than innovative science. It takes a community of smart, passionate people like you. Collaborating, supporting and inspiring each other. Combining to achieve breakthroughs that change patients’ lives. Ready to create a brighter future together? https://www.novartis.com/about/strategy/people-and-culture
Join our Novartis Network: Not the right Novartis role for you? Sign up to our talent community to stay connected and learn about suitable career opportunities as soon as they come up: https://talentnetwork.novartis.com/network
Benefits and Rewards: Read our handbook to learn about all the ways we’ll help you thrive personally and professionally: https://www.novartis.com/careers/benefits-rewards