ph3Summary /h3 pLocation: Barcelona, Spain; Tel Aviv, Israel /p h3About The Role /h3 pThe Enterprise Security Architecture team is looking for an Enterprise Security Architect – Data Security, who will work across information security risk management, with all information technology functions to ensure Novartis ‘Digital Workspace’ is designed and implemented as per defined policies, standards and industry good practices. They will be responsible for designing, implementing, and maintaining security controls for End User Computing (EUC), Microsoft 365, Voice and Video Collaboration platforms. This role requires close collaboration with Enterprise Architects and Functional Security Architects to ensure a holistic approach to security across the organization. The successful candidate will be a strong communicator with deep technical skills and, more importantly, a pragmatist who can think outside the box. The individual must be highly collaborative as they will need to influence functional leadership, project and application managers, architects, engineers and developers. /p h3Key Responsibilities /h3 ul liDevelop and enforce security policies and procedures related Data Security across Novartis businesses to meet business and regulatory requirements /li liDesign security measures and overall Data Security architecture for the IT landscape in line with the ISC policy framework /li liTechnical lead for PQC readiness program /li liSupport and continually review technology standards and controls related to Data Security and recommend information technology strategies, policies, and procedures /li liIdentify design problems within the Data Security domain /li liSupport projects to evolve Data Security solutions from evaluation to implementation and assist the delivery of the operational model /li liSupport the auditing of security policies and procedures /li liManagement communication with key stakeholders and provide reports to management /li liProvide ongoing support to maintain the Data Security domain’s effectiveness and efficiency by defining, delivering,



and supporting strategic plans for implementing information technologies /li liDevelop and maintain relationships with key stakeholders and vendors /li liSupport the direction of technological research by learning the organizational goals, strategies and business drivers /li liDevelop and maintain architecture diagrams and documentation related to Data Security processes and procedures /li liBreak down the strategic objectives to requirements on the solution portfolio and target architecture /li liKey contributor on products, services and/or infrastructure strategies that require complex or advanced conceptualization /li liResearch and evaluate new Data Security technologies and make strategic security technology choices, directly supervising the quality of designs and implementation inside and between components /li liWork with improvements, by participation in the development, of the architectural principles, processes, and standards /li /ul h3Essential Requirements /h3 ul liUniversity working and thinking level, degree in business/technical area or comparable education/experience /li li15+ years of working experience in Security domain; minimum 5 years in architecture capacity /li li5+ years of experience of working in or providing IT services to a large enterprise like Novartis /li liExceptional understanding security domains like Digital Workspace, Data Protection, AI Security as well as good knowledge of Network Security, Identity and Access Management, SIEM, Vulnerability Management /li liStrong understanding of core cryptography concepts (encryption, key exchange, hashing, digital signatures) /li ul liSolid PKI expertise, including certificate lifecycle management, trust models, and enterprise PKI architectures /li liClear understanding of Post‑Quantum Cryptography (PQC) concepts, quantum risks to current algorithms,



and crypto‑agility principles /li liAbility to assess quantum‑vulnerable cryptographic usage and data protection controls /li liExperience designing data encryption architectures for data at rest and in transit /li liKnowledge of key management and HSM/KMS solutions /li liFamiliarity with cryptographic standards and regulatory requirements (e.g., NIST) /li /ul liExceptional understanding and knowledge of general IT infrastructure technology, systems and management processes, and experience of sourcing complex IT services, working closely with vendors and making full use of their capabilities /li liGood knowledge of IT Project Management: Proven experience to initiate and manage projects that will affect other divisions, departments and functions, as well as the corporate environment /li liExperience with compliance requirements (e.g. SOX, GxQ / CSV, E‑compliance, Records Management, Privacy), and knowledge of (information) risk management related standards or frameworks such as COSO, ISO 2700x, CobiT, ISO 24762, BS 25999, NIST, ISF Standard of Good Practice and ITIL /li liStrong leadership experience, with excellent written and verbal communication and presentation skills at all levels of the organisation and experience in reporting to and communicating with senior level management (with and without IT background, with and without in-depth risk management background) on information risk topics; interpersonal and collaborative skills, as well as good mediation and facilitation skills /li /ul h3Desirable /h3 ul liGood understanding and experience with Enterprise Architecture Frameworks like TOGAF will be an added advantage /li /ul h3Commitment To Diversity Inclusion /h3 pWe are committed to building an outstanding, inclusive work environment and diverse teams representative of the patients and communities we serve. /p h3Accessibility And Accommodation /h3 pNovartis is committed to working with and providing reasonable accommodation to all individuals. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the recruitment process, or in order to receive more detailed information about the essential functions of a position, please send an e‑mail to and let us know the nature of your request and your contact information. Please include the job requisition number in your message. /p h3Benefits and Rewards /h3 pAll the ways we’ll help you thrive personally and professionally. /p /p #J-18808-Ljbffr

📌 Enterprise Security Architect – Data Security (Barcelona)
🏢 Novartis
📍 Barcelona