Associate Director - IT Project Manager, Physical Protective Security

About the role

Novartis is hiring an Associate Director - IT Project Manager, Physical Protective Security in Barcelona, Spain (hybrid, 12 days per month in the office). The role delivers complex, cross-regional security and technology initiatives, combining physical protective security expertise with senior IT project and program management. It is a senior delivery owner for security-critical programs such as access control systems, video surveillance, identity and access platforms and digital security solutions, ensuring predictable delivery, regulatory compliance and alignment with Physical Protective Security, DDIT, Procurement and external vendors. Relocation support is not offered.

Key responsibilities

• Own end-to-end delivery of Protective Security projects, from intake to handover, on time, on scope and on budget, managing security vendors, integrators, SaaS providers and local partners
• Lead global and regional rollouts of security platforms such as access control, CCTV and mobile credentials
• Translate business security needs into IT delivery, ensuring solutions meet security standards, policies and regulatory requirements, and align physical security, cybersecurity and enterprise IT architecture
• Oversee implementation of access control (badge, mobile, biometric), video surveillance and monitoring, identity and access integrations, and security operations and incident management tools
• Establish project governance aligned with DDIT standards, manage security, operational and delivery risks, and ensure compliance with audit, GRC and SoD frameworks
• Act as main interface between Protective Security leadership, business and IT delivery teams, prepare executive status updates and escalate issues
• Manage security vendors against contractual deliverables, work with Procurement on SOWs and contracting models, and own project financials including forecast, tracking and cost control
• Contribute to the Protective Security IT roadmap and project portfolio, standardize delivery approaches across sites and capture lessons learned

Required profile

• 10+ years of IT project/program management in enterprise or regulated environments, in Protective Security and global multi-country deployments
• Experience managing external vendors and complex contracts, including RFPs and security technology vendors
• Proven execution excellence, with project and program management methodologies (Waterfall, Agile, hybrid), planning, dependency management and critical-path thinking
• Senior-level leadership in complex, matrix organizations, with strong decision-making under pressure
• Global, multi-country delivery experience and excellent executive-ready communication in English
• Desirable: degree in IT, Engineering, Security or related field; PMP, PRINCE2, Agile or security certifications (CPP, CISSP); pharma, regulated industry or critical infrastructure experience; knowledge of GRC, IAM and compliance frameworks

Required skills

• Physical security systems: access control, surveillance, CCTV, digital visitor management, alarm systems
• Enterprise platforms such as SAP, ServiceNow and IWMS
• Project management methodologies (Waterfall, Agile, hybrid)

What we offer

• Base salary range of EUR 57,900 to EUR 107,500, with a possible performance-based bonus
• Flexible and hybrid working options where possible
• Insurance plans, retirement plans, wellbeing resources and global recognition programs
• Minimum 14 weeks of paid parental leave