Experteer Overview In this role you will design, implement and maintain data security controls across Novartis’ IT landscape, aligning with the ISC policy framework. You will work closely with Enterprise Architects and functional security leaders to secure EUC, Microsoft 365, and collaboration platforms within the Digital Workspace. You’ll lead PQC readiness and oversee policy enforcement, standards, and strategic security initiatives with vendor partners. The role requires strong collaboration and clear communication with senior stakeholders to drive secure, compliant digital transformation.Compensaciones / Ventajas
- Develop and enforce Data Security policies across the business to meet regulatory and business needs
- Design Data Security architecture for the IT landscape aligned with ISC framework
- Technical lead for PQC readiness program
- Review and support technology standards, controls, and IT strategies related to Data Security
- Identify design issues within the Data Security domain and propose solutions
- Support projects from evaluation to implementation and operational model delivery
- Audit security policies and procedures and report to management
- Maintain strategic plans and relationships with stakeholders and vendors to ensure Data Security effectiveness
- Create architecture diagrams and documentation for Data Security processes
- Translate strategy into concrete requirements for the solution portfolio and target architecture
- Contribute to product, service,



or infrastructure strategies requiring complex conceptualization
- Research and evaluate new Data Security technologies and supervise design/implementation quality
- Improve architectural principles, processes, and standards through ongoing participation
- Assist in vendor engagement and leverage external capabilities to support security goalsResponsabilidades
- 15+ years in Security with at least 5 years in an architecture capacity
- 5+ years in IT services to a large enterprise
- Strong knowledge of Digital Workspace, Data Protection, AI Security, Network Security, IAM, SIEM, Vulnerability Management
- PKI expertise including certificate lifecycle management and enterprise PKI
- Understanding of Post-Quantum Cryptography (PQC) and crypto‑agility
- Experience designing data encryption architectures (data at rest/in transit)
- Knowledge of key management and HSM/KMS solutions
- Familiarity with cryptographic standards and regulatory requirements (e.G., NIST)
- Solid understanding of IT infrastructure, management processes, and vendor collaboration
- Experience with IT project management and cross-division collaboration
- Experience with compliance standards (SOX, GxP/CSV, E‑compliance, Records Management, Privacy) and risk management frameworks (COSO, ISO 2700x, CobiT, ISO 24762, BS 25999, NIST, ISF)
- Strong leadership, and ability to communicate with senior management and diverse stakeholdersRequisitos principales
-

📌 Enterprise Security Architect - Data Security (Barcelona)
🏢 Novartis
📍 Barcelona