Security Architect - Operational Technology

Job Description

15 Petabyte of data hosted, 49 countries supported, 15000 servers and thousands of devices to connect locations and businesses.Information is clearly one of Novartis` most valuable asset. In ISRM (Information Security and Risk Management), we implement and maintain solutions that secure the Novartis environment, protect our data and provide the necessary control framework to enable compliance with the various regulations associated with the healthcare industry.105,000 outstanding individuals work with Novartis all with different needs and aspirations. Aligned to a single inspirational purpose to reimagine medicine for millions of patients across the world. Join us and directly contribute to Novartis vision to Reimagine Medicine.Your Responsibilities Include but are not limited to: Lead all aspects of architectural activities for a technology domain, or architectural practice area, or manage the development of solution architectures for projects or programs within a business area. Define standards and direction of architecture in the specific business or technical domain. Define and develop the logical design and information management strategies vital to store, move and manage data in a new target state. Utilize architecture patterns to suggest the most adequate utilization of technical platforms in support of the holistic solution architecture design. Define, build and evolve the Architecture Governance Framework (e.g. architecture methods, practices and standards) for IT. Improve and ensure cyber security for our OT-systems. These OT-systems are used in primary and secondary manufacturing as well as warehouses, laboratory and building management. Define, design, apply and support security controls to OT systems in our sites and own and define the architectural security standards for OT. The candidate will lead a team of domain specialists on this matter.Minimum requirements Minimum Requirements: Professional ICS / OT security certification like GICSP, or IT security certifications like CISSP 15 + year of IT Experience 6 +in-depth experience of securing Industrial Control - Systems(ICS) like PLC, SCADA, DCS, Serialization solutions Ideally also experience in securing laboratory systems like chromatography, NIR, Raman and other laboratory including laboratory environmental equipment Ideally a solid foundation in laboratory / ICS support which was build up with IT topics like network architectures, network protocols,industrial protocols, Active Directory, Backup processes, virtualization of applications and other general IT knowledge Fundamental knowledge in IT-Security threat modeling, vulnerability assessments and pen-testing. Experienced in the use of tools for incident investigations, simulation and forensics - GxP regulations and CSV, 21 CFR part 11 in depth knowledge - Knowledge of related standards like IEC 62443, NIST 800-82Why consider Novartis 799 million. That s how many lives our products touch. And while we re proud of that fact, in this world of digital and technological transformation, we must also ask ourselves this: how can we continue to improve and extend even more people s lives We believe the answers are found when curious, courageous and collaborative people like you are brought together in an inspiring environment. Where you re given opportunities to explore the power of digital and data. Where you re empowered to risk failure by taking smart risks, and where you re surrounded by people who share your determination to tackle the world s toughest medical challenges. https://trmx.brassring.com/requisition/add formtypeid=597&resp true&languages=gb#Imagine what you could do at Novartis!,

Keyskills :
aaait securityactive directorycontinuous improvement facilitationdeliverycontrol frameworkcommercial modelsdocumentation21 cfrsecurity controlsthreat modelingsolution designcyber securitysiem