Sr. Spec. DDIT ISC Gov Digital

Job Description Summary

-Assist in activities to implement and monitor enterprise information security risk and control processes to protect patients and company information both internally and at third parties. -Support implementation of security governance principles and processes across functions leveraging enterprise policies, awareness and training programs as well as in-country business partnering.

Job Description

Major accountabilities:

• Collaborate with business to understand threats and ensure Novartis most critical business processes and data is protected.
• Ensure implementation of the information management framework to safeguard the integrity, confidentiality and availability of information owned, controlled or processed by Novartis.
• Deliver effective security training and awareness programs and coordinate delivery across functions and countries.
• Support software asset and records management governance and deliver services to support business operations as well as for mergers, acquisitions and divestitures.
• Assess security risks around third parties and deliver services to reduce exposure -Perform assessments and verification of achieved quality levels and risks in respect to external legislative and regulatory requirements, as well as internal policies -Establish close collaboration with stakeholders to facilitate alignment with policies, risks as well as internal and external audits.
• Monitor adherence of the defined governance principles to ensure expected value is delivered -Take responsibility to ensure adherence with Security and Compliance policies and procedures within Information Management Policy scope

Key performance indicators:

• Effectivness of oversight and leadership around information security risk and compliance activities.
• Transparency level of risks across the enterprise.
• Governance elements and principles established and enforced with high efficiency and effectiveness.
• Levels of collaboration/working relationship achieved with enterprise senior management.

Minimum Requirements:
Work Experience:

• Influencing without authority.
• Relationship Management.
• Strategy Development.
• Accountability.
• Experience working cross-functionally and trans-nationally.
• Interactions with senior management.
• Collaborating across boundaries.

Skills:

• Business Partnering.
• Communication Skills.
• Cyber Security.
• Influencing Skills.
• Information Security Risk Management.
• IT Governance.
• Stakeholder Management.

Languages :

• English.

Skills Desired

Business Partnerships, Communication, Cybersecurity, Influencing Skills, Information Security Risk Management, IT Governance, Stakeholder Management