Director, DDIT ISC Functional Security Architect IAM

About the role

Novartis is looking for a Director, DDIT ISC Functional Security Architect for Identity and Access Management (IAM). The role provides enterprise-level architectural leadership and specialist security expertise for IAM, partnering with Functional Security Architects, Enterprise Architects, Platform Architects, business stakeholders and IAM capability teams to deliver secure, scalable and reusable identity patterns. It also contributes to the strategic development of IAM capabilities, including IGA, authentication, authorization, federation, PAM, machine and workload identities, and emerging identity needs around AI and autonomous agents.

Key responsibilities

• Review, approve and govern IAM technology variants and architecture patterns against enterprise security and architecture standards.
• Drive IAM standards in collaboration with Enterprise Architecture, Security Architecture, IAM capability teams and Architecture Governance.
• Act as IAM subject-matter expert for Functional Security Architects, giving architecture guidance, design reviews, reusable patterns and risk advice.
• Support the development of IAM capabilities, roadmaps and reference architectures, and advance the maturity of IAM governance processes.
• Drive IAM architecture KPIs and metrics, identify consolidation and retirement of overlapping IAM technologies, and communicate IAM risks to stakeholders.
• Evaluate new IAM and security technologies and engage early in solution governance so IAM requirements are defined before design.
• Promote reuse of approved IAM capabilities and build and maintain an IAM architecture Community of Practice.

Required profile

• Strong experience in IAM architecture, security architecture or enterprise security architecture.
• Deep understanding of identity lifecycle management, authentication, authorization, federation, access governance and privileged access.
• Experience architecting enterprise SSO, MFA and passwordless authentication solutions.
• Experience with identity governance and administration and privileged access management.
• Ability to translate security requirements into practical, reusable architecture patterns, with strong stakeholder management skills.

Required skills

• OAuth 2.0, OpenID Connect, SAML 2.0, SCIM and modern identity-federation patterns.
• RBAC, ABAC, policy-based access control, least privilege and separation of duties.
• Cloud-native identity, workload identity, APIs, service accounts and non-human identities.
• Zero Trust architecture and identity-centric security.
• Desirable: security architecture for Generative AI and autonomous AI agents, including agent identity and delegated authorization.

What we offer

• Expected annual base salary of 69,000 to 128,100 EUR, with a possible performance-based bonus.
• Benefits such as insurance plans, retirement plans, wellbeing resources and global recognition programs.
• Flexible and hybrid working options where possible, and at least 14 weeks of paid parental leave.