Overview

In this role you will lead the design and ongoing improvement of enterprise DD⁢ risk governance, ensuring compliant, transparent and auditable processes. You will enable adoption through fit-for-purpose processes, technology, automation, and data-driven insights. You will collaborate with global stakeholders to align governance with regulatory requirements and business priorities, delivering risk-based decision support and streamlined operations. This is an opportunity to shape risk governance at scale within a leading pharmaceutical company.

Compensaciones / Incentivos

- flexible and hybrid working options
- minimum 14 weeks paid parental leave
- insurance plans
- retirement plans
- wellbeing resources
- global recognition programs

Responsabilidades

- Define and continually improve risk, issue, and exception governance processes aligned with policies and regulatory requirements
- Establish governance frameworks with clear roles, decision rights, approvals and escalation paths
- Manage lifecycle of risks, issues, exceptions, controls and remediation actions
- Ensure identification, assessment, monitoring, reporting, renewal and closure with auditability and transparency
- Escalate material risks and systemic concerns to appropriate governance bodies
- Lead process simplification, standardization, and continuous improvement across DD⁢ risk governance
- Evaluate and optimize tools, workflows and technology solutions,



including integration and modernization
- Identify and implement automation and responsible AI opportunities with proper oversight and accountability
- Define risk data, metrics, analytics, reporting and actionable insights for decision-making
- Drive stakeholder adoption, capability building and cross-functional collaboration to strengthen governance and process excellence

Requisitos principales

- University degree in information technology, information security, risk management, business administration, engineering or related discipline; postgraduate qualification or professional certification is an advantage
- Significant experience in technology or enterprise risk management, information security, compliance governance, process management or digital enablement
- Proven ability to define or improve enterprise governance frameworks and cross-functional processes
- Experience evaluating enterprise tools and driving process simplification and sustainable adoption
- Understanding of automation, data analytics and AI-enabled ways of working with responsible oversight
- Experience operating in a global, matrixed and regulated organization and influencing senior stakeholders without direct authority

- enterprise mindset
- strategic and systems thinking
- sound judgment
- Information Security Risk Management
- IT Governance
- Stakeholder Management

📌 Assoc. Dir. DDIT ISC Risk Governance & Enablement - Novartis (Barcelona)
🏢 Novartis
📍 Barcelona