Tel Aviv, Israel Internal job title: DDIT ISC Enterprise Security Architecture - Data Security The Enterprise Security Architecture team is looking for a deeply technical security architect who enjoys solving hard engineering problems, influencing enterprise-scale technology decisions, and staying close to implementation.Over the next several years, your primary mission will be to lead our Post-Quantum Cryptography (PQC) readiness program and modernize Data Loss Prevention (DLP) capabilities across the enterprise. You will work across infrastructure, cloud, networking, identity, workplace technologies, and applications to help prepare the organization for one of the largest cryptographic transformations in decades while simultaneously improving the effectiveness, precision, and operational efficiency of our data protection capabilities.Develop and enforce security policies and procedures related Data Security across Novartis businesses to meet business and regulatory requirementsDesign security measures and overall Data Security architecture for the IT landscape in line with the ISC policy frameworkTechnical lead for PQC readiness programSupport and continually review technology standards and controls related to Data Security and recommend information technology strategies, policies, and proceduresIdentify design problems within the Data Security domainSupport projects to evolve Data Security solutions from evaluation to implementation and assist the delivery of the operational modelSupport the auditing of security policies and proceduresManagement communication with key stakeholders and provide reports to managementProvide ongoing support to maintain the Data Security domain’s effectiveness and efficiency by defining, delivering,



and supporting strategic plans for implementing information technologiesDevelop and maintain relationships with key stakeholders and vendorsSupport the direction of technological research by learning the organizational goals, strategies and business driversDevelop and maintain architecture diagrams and documentation related to Data Security processes and proceduresBreak down the strategic objectives to requirements on the solution portfolio and target architectureKey contributor on products, services and/or infrastructure strategies that require complex or advanced conceptualizationResearch and evaluate new Data Security technologies and make strategic security technology choices, directly supervising the quality of designs and implementation inside and between componentsWork with improvements, by participation in the development, of the architectural principles, processes, and standardsEssential Requirements:5+ years of experience of working in or providing IT services to a large enterprise like Novartis.Exceptional understanding security domains like Digital Workspace, Data Protection, AI Security as well as good knowledge of Network Security, Identity and Access Management, SIEM, Vulnerability ManagementStrong understanding of core cryptography concepts (encryption, key exchange, hashing, digital signatures):Clear understanding of Post‑Quantum Cryptography (PQC) concepts, quantum risks to current algorithms, and crypto‑agility principles.Ability to assess quantum‑vulnerable cryptographic usage and data protection controls.Experience designing data encryption architectures for data at rest and in transit.Exceptional understanding and knowledge of general IT infrastructure technology,



systems and management processes, and experience of sourcing complex IT services, working closely with vendors and making full use of their capabilitiesGood knowledge of IT Project Management: Proven experience to initiate and manage projects that will affect other divisions, departments and functions, as well as the corporate environment.SOX, GxQ / CSV, E-compliance, Records Management, Privacy), and knowledge of (information) risk management related standards or frameworks such as COSO, ISO 2700x, CobiT, ISO 24762, BS 25999, NIST, ISF Standard of Good Practice and ITILStrong leadership experience, with excellent written and verbal communication and presentation skills at all levels of the organisation and experience in reporting to and communicating with senior level management (with and without IT background, with and without in-depth risk management background) on information risk topics; Our purpose is to reimagine medicine to improve and extend people’s lives and our vision is to become the most valued and trusted medicines company in the world. It is our associates that drive us each day to reach our ambitions.

Join our Novartis Network: If this role is not suitable to your experience or career goals but you wish to stay connected to learn more about Novartis and our career opportunities, join the Novartis Network here: and accommodation:Novartis is committed to working with and providing reasonable accommodation to all individuals.

Skills DesiredBusiness Architecture, Business Value Creation, Change Management, Consulting, Decision Making, Digital Capabilities, Effective use of Technology (Inactive), Enterprise Architecture (EA), Influencing Skills, IT Governance, Organization Awareness (Inactive), Solution Architecture, Stakeholder ManagementSummaryLocation: Barcelona Gran Vía; IsraelType: Full time

📌 Enterprise Security Architect - Data Security (Barcelona)
🏢 Novartis
📍 Barcelona