Associate Director, DDIT ISC Risk Governance & Enablement

About the role

The Associate Director DDIT ISC Risk Governance & Enablement is accountable for defining, governing and continuously improving the enterprise processes and enabling capabilities for managing DD&IT risks, issues and exceptions. The role sets up simple, consistent and effective governance across DD&IT and enables its adoption through fit-for-purpose processes, technology, automation, artificial intelligence, data and insights. It works closely with stakeholders across DD&IT, ISC and other Novartis functions to keep risk governance aligned with requirements, standards and regulations.

Key responsibilities

• Define and continuously improve DD&IT risk, issue and exception governance processes aligned with policies, standards and regulatory requirements.
• Establish governance frameworks covering roles, accountabilities, decision rights, approvals and escalation paths.
• Manage the lifecycle of risks, issues, exceptions, controls and remediation actions, with strong auditability and transparency.
• Drive timely escalation of material risks and systemic concerns to governance bodies.
• Lead process simplification, standardization, harmonization and continuous improvement.
• Evaluate and optimize tools, workflows and technology solutions, including integration, consolidation and modernization.
• Identify and implement automation and responsible AI opportunities with appropriate oversight, security and traceability.
• Define risk data, metrics, analytics, reporting and insights to support decision-making.
• Drive stakeholder adoption, capability building and cross-functional collaboration.

Required profile

• University degree in information technology, information security, risk management, business administration, engineering or a related discipline; postgraduate qualification or professional certification is an advantage.
• Significant experience in technology or enterprise risk management, information security, compliance governance, process management or digital enablement.
• Experience defining enterprise governance frameworks and improving cross-functional processes.
• Experience evaluating tools and workflows and driving process improvement and adoption.
• Understanding of automation, data analytics and AI-enabled ways of working, including human oversight.
• Experience in a global, matrixed and regulated organization, influencing senior stakeholders without direct authority.

Required skills

• Information security risk management and IT governance
• Stakeholder management and business acumen
• Influencing skills

What we offer

• Base salary range of 57,900 to 107,500 EUR, with a possible performance-based bonus.
• Insurance plans, retirement plans, wellbeing resources and global recognition programs.
• Flexible and hybrid working options where possible, and at least 14 weeks of paid parental leave.