01 oct
|
Novartis
|
Barcelona
01 oct
Novartis
Barcelona
Overview
You will own the enterprise SDLC governance model, turning policy into code and automated controls to speed secure software delivery. In this hands-on role, you influence engineers across the company while building reference architectures and governance tooling. You’ll work in a federated community to align security, compliance, and quality with AI-enabled software. This position offers the chance to shape how regulated software is developed at scale with modern automation and AI tooling.
Compensaciones / Incentivos
- competitive base salary
- performance-based bonus eligibility
- insurance plans
- retirement plans
- wellbeing resources
- flexible and hybrid working options
Responsabilidades
- Own enterprise policy, standards and controls for software engineering (source control, branching, peer review, testing, release management, environment segregation, change control, documentation).
- Rationalise GxP, SOX, privacy, security and IT-quality requirements into a single risk-based framework.
- Retire non-risk-reducing controls and implement tooling to accelerate development, with AI tooling where applicable.
- Implement policy as code and controls as code (branch protections, mandatory review, signed commits, segregation of duties, approvals, audit trails).
- Build automated evidence pipelines and define control telemetry (coverage, drift, MTTR, effectiveness) prioritising agility and automation.
- Maintain secure-by-default guardrails in pipelines/platforms, aligning with NIST SSDF, ISO/IEC 27001, IEC 62304 where relevant.
- Define AI governance controls (coding assistants, IP/licensing, provenance, attribution, human accountability).
- Define AI product controls (model lifecycle, datasets, documentation, evaluation, drift monitoring, explainability, oversight).
- Leverage AI to reduce compliance burden (risk drafting, control mapping, test generation) while supporting audits and certifications.
- Lead a federated engineering/quality/security/compliance
📌 Head DDIT ISC Software Development Governance, Integrity (Barcelona)
🏢 Novartis
📍 Barcelona