SummaryLocation: Barcelona, Spain 12 days/week in officeInternal job title: DDIT ISC End Points, Servers, Data ProtectionThis role is based in Barcelona. Novartis is unable to offer relocation support for this role: please only apply if this location is accessible for you.Job DescriptionThe Security Operations team is looking for an Infrastructure & Endpoint Protection Security Engineer (Associate Director DDIT ISC End Points, Servers, Data Protection) to join us in Barcelona. Ensure stable, secure, and compliant operations across Endpoint Protection and Data Protection solutions, including deployment, lifecycle management, and continuous improvementAdvocate, implement, and enforce Novartis security standards, policies, procedures across all supported services and technologies.Manage services in alignment with approved budgets, ensuring cost control and optimizationFoster a culture of high performance, accountability, and innovation within Information Security & ComplianceManage governance of security exceptions and risk acceptance.Collaborate with CSOC to support cybersecurity threat monitoring, detection, and response activities using deployed endpoint protection toolsets, and partner with service lines, platform teams, and application owners to coordinate corrective and preventive actions.Oversee general deployment, health, and compliance of endpoint security agents, driving remediation where gaps are identified.Lead crisis and incident management activities, engaging internal and external stakeholders as required, own Problem Management,



ensuring root cause analysis is completed and preventive measures are implemented to avoid recurrence; Essential Requirements:5+ years of experience in IT Security Engineering with strong focus on Endpoint Security and Data Protection, and strong background in Security Operations processes, tooling, and service delivery.Hands-on experience with Endpoint and Data Protection technologies, including: Microsoft Defender for Endpoint, AV, EDR/XDR, Palo Alto Cortex XDR, BeyondTrust Elevated Privlige Management, Zimperium Mobile Threat Defense, Data Loss Prevention (DLP), Information protection solutionsDemonstrated ability to identify, assess, and mitigate security risks, build trust, and maintain credibility with business partners.Proven stakeholder engagement, presentation, and excellent communication skills across technical and senior leadership levels; effective collaborator with senior management, compliance, architecture, application, infrastructure, and Security Operations teams.PowerShell, Python) to support operational efficiency and automation initiatives.Our purpose is to reimagine medicine to improve and extend people's lives and our vision is to become the most valued and trusted medicines company in the world.

It is our associates that drive us each day to reach our ambitions.

Join our Novartis Network: If this role is not suitable to your experience or career goals but you wish to stay connected to learn more about Novartis and our career opportunities, join the Novartis Network here: and accommodation:Novartis is committed to working with and providing reasonable accommodation to all individuals.

Skills DesiredBusiness Acumen, Change Management, Escalation, Information Security Audit, Information Security Risk Management, Operational Excellence Projects, Quality Management, Root Cause Analysis (RCA), Secops (Security Operations), Vendor ManagementSummaryLocation: Full time

📌 Infrastructure & Endpoint Protection Security Engineer (Cataluña)
🏢 Novartis
📍 Cataluña