Location: Barcelona, Spain

Internal job title: Associate Director DDIT ISC End Points, Servers, Data Protection

This role is based in Barcelona. Novartis is unable to offer relocation support for this role; please only apply if this location is accessible for you.

The Security Operations team is looking for an Infrastructure & Endpoint Protection Security Engineer to join us. This role will oversee the security operations service line, technology governance, and external/internal interfaces in accordance with service operations and management processes.

Key Responsibilities

- Ensure stable, secure, and compliant operations across Endpoint Protection and Data Protection solutions, including deployment, lifecycle management, and continuous improvement.
- Advocate, implement, and enforce Novartis security standards, policies, and procedures across all supported services and technologies.
- Manage services in alignment with approved budgets, ensuring cost control and optimization.
- Foster a culture of high performance, accountability, and innovation within Information Security & Compliance.
- Manage governance of security exceptions and risk acceptance.
- Collaborate with the CSOC to support cybersecurity threat monitoring, detection, and response activities using deployed endpoint protection toolsets, and partner with service lines, platform teams, and application owners to coordinate corrective and preventive actions.
- Oversee general deployment, health, and compliance of endpoint security agents, driving remediation where gaps are identified.
- Lead crisis and incident management activities, engaging internal and external stakeholders as required, own Problem Management, ensuring root‑cause analysis is completed and preventive measures are implemented to avoid recurrence.
- Drive service management and BAU operations,



including leadership and oversight of external service providers.
- Lead the creation, maintenance, and continuous improvement of service documentation, runbooks, and operational procedures; ensure adherence to operational procedures, maintaining system integrity, availability, and security.

Essential Requirements

- 5+ years of experience in IT Security Engineering with strong focus on Endpoint Security and Data Protection, and a strong background in Security Operations processes, tooling, and service delivery.
- Hands‑on experience with Endpoint and Data Protection technologies, including Microsoft Defender for Endpoint, AV, EDR/XDR, Palo Alto Cortex XDR, BeyondTrust Elevated Privileged Management, Zimperium Mobile Threat Defense, Data Loss Prevention (DLP), and information protection solutions.
- Demonstrated ability to identify, assess, and mitigate security risks, build trust, and maintain credibility with business partners.
- Proven stakeholder engagement, presentation, and excellent communication skills across technical and senior leadership levels; effective collaborator with senior management, compliance, architecture, application, infrastructure, and Security Operations teams.
- Clear, structured thinker able to navigate ambiguity, align security solutions to business needs, and drive outcomes.
- Thrives in a fast‑paced, technology‑driven environment, proactively advancing security capabilities, and consistently delivers against commitments, deadlines, and competing priorities.

Desirable Requirements

- Working knowledge of scripting and automation (e.g., PowerShell, Python) to support operational efficiency and automation initiatives.

Commitment to Diversity & Inclusion: We are committed to building an outstanding, inclusive work environment and diverse teams representative of the patients and communities we serve.

#J-18808-Ljbffr

📌 Infrastructure & Endpoint Protection Security Engineer (Barcelona)
🏢 Novartis Farmacéutica
📍 Barcelona