Functional Security Architect

Job Description

15 Petabyte of data hosted, 49 countries supported, 15000 servers and thousands of devices to connect locations and businesses.Information is clearly one of Novartis` most valuable asset. In ISRM (Information Security and Risk Management), we implement and maintain solutions that secure the Novartis environment, protect our data and provide the necessary control framework to enable compliance with the various regulations associated with the healthcare industry.105,000 outstanding individuals work with Novartis all with different needs and aspirations. Aligned to a single inspirational purpose to reimagine medicine for millions of patients across the world. Join us and directly contribute to Novartis vision to Reimagine Medicine.Your responsibilities included but are not limited to : The FSA will work with their respective business enabling function (BEF) to ensure solutions are security crafted, following approved security patterns and providing ongoing security consulting and expertise to support the following activities:1.Review security architecture of public cloud solutions for Azure and AWS2.Provide SME guidance for SaaS/IaaS/PaaS security design and practices for new digital initiatives3.Validate security requirements for planned solutions and platforms4.Engage in new projects and be part of working teams, crafting and securing workloads in public and private cloud environments5.Experience proposing and conducting Proofs of Concept (POC), Proofs of Value (POV) activities to ensure innovative solutions can be adopted globally and meet the business need. The successful candidate will be a good communicator with deep technical and security skills, especially pertaining to IaaS security. The individual must be highly collaborative as they will need to work closely with architects, engineers, 3rd party vendors. Provides in depth expertise to for IT security principles, ensures controls are included as technical requirements to ensure security-by-design standard methodologies, Acts as single point of contact, collaborating closely with other Security Architects and IT Architects on IT security related matters, Promotes IT Security culture within the business and application management team Defines pragmatic solutions and recommends alternatives that meet or exceed security requirements, Performs risk/threat assessment of IT projects related to the function Leads prioritization of security assessment for the function, Leverages application security risk assessment pool for low impact projectsMinimum requirements Minimum Requirements: University working and thinking level, degree in business/technical/scientific area or comparable education/experience Professional information security certification, such as CISSP, CISM or ISO 27001 auditor / practitioner is preferred. Professional (information system) risk or audit certification such as CIA, CISA or CRISC is preferredCSSLP, GSSP, ECCSP, CASS 10+ years work experience, 7 years within Information Security management. 2+ years experience in sr. management position with demonstrated leadership skills in global matrix organization, 5+ years as an IT security specialist Experienced knowledge of enterprise IT infrastructure technology, systems, vulnerability management, and organisational change processes, especially in large scale implementations Familiarity with frameworks such as ISO 2700x, CobiT, NIST, ISF, or SOX1.Knowledge of OWASP, Secure SDLC standard methodologies, CI/CD pipelines, encryption, identity and access management, data integrity, PKI and other related secure software design standard methodologies2.Assesses the feasibility, time and resource requirements to ensure not to over promise 3.Keeps pace with industry developments to provide best solutions for the business4.Good mediation and facilitation skills5.Proven understanding of IT Project Management and PMO methodologiesWhy consider Novartis 799 million. That s how many lives our products touch. And while we re proud of that fact, in this world of digital and technological transformation, we must also ask ourselves this: how can we continue to improve and extend even more people s lives We believe the answers are found when curious, courageous and collaborative people like you are brought together in an inspiring environment. Where you re given opportunities to explore the power of digital and data. Where you re empowered to risk failure by taking smart risks, and where you re surrounded by people who share your determination to tackle the world s toughest medical challenges. Imagine what you could do at Novartis!,

Keyskills :
new projectsiso 27001security riskaaait project managementprivate clouddeliveryit projectsdocumentationsecure sdlcsiemit securitysolution designenterprise it infrastructure