$ads={1}
The Novartis Mergers and Acquisition IT (M&A) is looking for a talented Security Solutions Consultant to assist them acquisition due diligence, network and application security review and security consultation of newly acquired companies as well as support potential divestitures. M&A IT collaborates across scientific and business organizational boundaries, with a focus on maximizing the return of value for each acquisition while managing risk throughout the deal lifecycle. As the Security Architect, you will support these strategic initiatives by providing subject matter expertise in the domain of end-to-end security architecture for typical enterprise services found across small startup science research companies and mid-size companies.
Our Security Solutions Consultant will work with the M&A deal teams and technology peers to ensure security vulnerabilities and systems are secure, consult to new-company’s IT leadership and management Novartis security standards and approved security patterns while providing ongoing security consulting and expertise to support the following activities:
a) Review current state and future state security architecture for variety of scientific platforms, master data management systems, core IT network design, clinical trial systems, regulatory reporting solutions, 3rd party IT suppliers, as well as business systems that support H/R, finance and operations.
b) Review security architecture of operational changes, enhancements, and other releases related to production systems
c) Support and provide recommendations to leadership for remediating security gaps
As part of daily activities, the SSA will ensure secure-by-design principles are followed for applications and technical solutions that NewCo’s require to integrate into Novartis’ eco-system by providing consultation, solution architecture recommendations and work closely with domain architects to leverage Novartis’ global enterprise platforms or assist in the development of innovative new digital solutions.
The successful candidate will be a strong communicator with deep technical and security skills, especially pertaining to SaaS, AWS and Azure Cloud architecture, firewalls/SD-WAN security, enterprise and scientific research based systems. The individual must be highly collaborative as they will need to work closely with application managers, platform engineers, 3rd party vendors, software developers and architects.
Your responsibilities include but are not limited to:
Our Security Solutions Consultant will work with the M&A deal teams and technology peers to ensure security vulnerabilities and systems are secure, consult to new-company’s IT leadership and management Novartis security standards and approved security patterns while providing ongoing security consulting and expertise to support the following activities:
a) Review current state and future state security architecture for variety of scientific platforms, master data management systems, core IT network design, clinical trial systems, regulatory reporting solutions, 3rd party IT suppliers, as well as business systems that support H/R, finance and operations.
b) Review security architecture of operational changes, enhancements, and other releases related to production systems
c) Support and provide recommendations to leadership for remediating security gaps
As part of daily activities, the SSA will ensure secure-by-design principles are followed for applications and technical solutions that NewCo’s require to integrate into Novartis’ eco-system by providing consultation, solution architecture recommendations and work closely with domain architects to leverage Novartis’ global enterprise platforms or assist in the development of innovative new digital solutions.
The successful candidate will be a strong communicator with deep technical and security skills, especially pertaining to SaaS, AWS and Azure Cloud architecture, firewalls/SD-WAN security, enterprise and scientific research based systems. The individual must be highly collaborative as they will need to work closely with application managers, platform engineers, 3rd party vendors, software developers and architects.
Your responsibilities include but are not limited to:
- Providing in depth expertise about security principles and ensuring controls are included as technical requirements
- Advising peer architects and technologists on approved security patterns and practices
- Reviewing and challenging defined IT security related internal standards for the ongoing improvement of Novartis policies and procedures
- Acting as a single point of contact, collaborating closely with other Security Architects and IT Architects on IT security related matters
- Promoting our IT Security culture within the business and application management team and building an external network regarding IT security relevant to the business function
- Defining pragmatic solutions and recommending alternatives that meet or exceed security requirements
- Performing risk/threat assessments of all IT project related to the function and reporting on the security status of projects
- Managing a pool of external security and solution architects assigned to our portfolio
- Managing prioritization of security assessment for the function, working with our application security risk assessment pool for low impact projects
Commitment to Diversity & Inclusion:
We are committed to building an outstanding, inclusive work environment and diverse teams representative of the patients and communities we serve.
Minimum requirements
What You'll Need:
Nice To Have:
Why consider Novartis?
743 million. That’s how many lives our products touched in 2022. And while we’re proud of that fact, in this world of digital and technological transformation, we must also ask ourselves this: how can we continue to improve and extend even more people’s lives?
We believe the answers are found when curious, courageous and collaborative people like you are brought together in an inspiring environment. Where you’re given opportunities to explore the power of digital and data. Where you’re empowered to risk failure by taking smart risks, and where you’re surrounded by people who share your determination to tackle the world’s toughest medical challenges.
Imagine what you could do at Novartis!
Join our Novartis Network: If this role is not suitable to your experience or career goals but you wish to stay connected to learn more about Novartis and our career opportunities, join the Novartis Network here: https://talentnetwork.novartis.com/network
We are Novartis. Join us and help reimagine medicine.
Commitment to Diversity & Inclusion:
Novartis embraces diversity, equal opportunity and inclusion. We are committed to building diverse teams, representative of the patients and communities we serve, and we strive to create an inclusive workplace that cultivates bold innovation through collaboration, and empowers our people to unleash their full potential.
- Degree in a business/technical/scientific area or comparable qualifications/experience
- 5 years of Information Security management or IT security expertise
- Expert knowledge of enterprise IT infrastructure technology, systems, vulnerability management, and organisational change processes, especially in large scale implementations
- Demonstrated experience of effectively engaging with senior business leaders across a matrixed environment
- Familiarity with frameworks such as COSO, ISO 2700x, CobiT, NIST, SOX, GDPR
- Knowledge of OWASP, SDLC, encryption, identity and access management, data integrity and other related secure software design methodologies
- Proficiency in English (oral and written)
Nice To Have:
- Professional information security certification, such as CISSP, CISM or ISO 27001 auditor / practitioner is preferred. Professional (information system) risk or audit certification such as CIA, CISA or CRISC is preferred
- CSSLP, GSSP, ECCSP, CASS
Why consider Novartis?
743 million. That’s how many lives our products touched in 2022. And while we’re proud of that fact, in this world of digital and technological transformation, we must also ask ourselves this: how can we continue to improve and extend even more people’s lives?
We believe the answers are found when curious, courageous and collaborative people like you are brought together in an inspiring environment. Where you’re given opportunities to explore the power of digital and data. Where you’re empowered to risk failure by taking smart risks, and where you’re surrounded by people who share your determination to tackle the world’s toughest medical challenges.
Imagine what you could do at Novartis!
Join our Novartis Network: If this role is not suitable to your experience or career goals but you wish to stay connected to learn more about Novartis and our career opportunities, join the Novartis Network here: https://talentnetwork.novartis.com/network
We are Novartis. Join us and help reimagine medicine.
Commitment to Diversity & Inclusion:
Novartis embraces diversity, equal opportunity and inclusion. We are committed to building diverse teams, representative of the patients and communities we serve, and we strive to create an inclusive workplace that cultivates bold innovation through collaboration, and empowers our people to unleash their full potential.
Division
Operations
Business Unit
DATA, DIGITAL & IT
Country
Czech Republic
Work Location
Prague
Company/Legal Entity
NOV CZE
Alternative Country 1
Spain
Alternative Country 2
Mexico
Functional Area
Technology Transformation
Job Type
Full Time
Employment Type
Regular
Shift Work
No
Early Talent
Yes