Senior Specialist, Information Security Governance & Risk (DDIT ISC Ops)

About the role

Novartis is looking for a Senior Specialist for DDIT ISC Operations in Prague. The role supports the implementation of information security governance and strategy within the information management framework through business partnering, advising Operations IT and OT functions and overseeing a specific governance and risk area globally.

Key responsibilities

• Provide ISC governance and risk advice and support for Operations IT and OT, and manage IT/OT project risks in line with ISC strategy, policy, laws and industry standards.
• Monitor information risk and proactively mitigate issues, supporting risk-based treatment of threats, issues and vulnerabilities.
• Guide teams in understanding risk exposure and technical safeguards.
• Deliver global information governance programmes such as risk management, data classification, storage and transmission guidelines and audit readiness support.
• Maintain knowledge of internal controls and risk frameworks and support their implementation and monitoring.
• Provide KPI reporting, dashboards and continuous improvement to ensure compliance.
• Analyse the impact of new technologies and regulatory changes on information security, including Cyber Security and Data Privacy laws.
• Collaborate with Service Delivery Teams and other partners, share new ideas and use AI and automation to streamline compliance activities such as risk assessments, control documentation, testing and audit support.

Required profile

• Over 8-10 years of experience in business information security and compliance, IT risk management, audit management and information governance.
• Experience with GxP quality guidelines and regulations, and with OT security compliance in a manufacturing setting.
• University degree in a business, technical or scientific area, or comparable education/experience.
• Preferred: an information security certification such as CISM, CRISC, CISA or CISSP.
• Desirable: proficiency in written and spoken English.

Required skills

• Audits and compliance management
• Compliance risk management and training
• Operational excellence and quality assurance
• Stakeholder management with senior executives and site heads

What we offer

• Base salary range of 948,290 to 1,761,110 CZK, with a possible performance-based bonus.
• Benefits such as insurance plans, retirement plans and wellbeing resources.
• Flexible and hybrid working where possible, and at least 14 weeks of paid parental leave.