Enterprise Security Architect – Data Security

About the role

Novartis is hiring an Enterprise Security Architect for its Data Security function, based in Barcelona (Spain) or Tel Aviv (Israel), on a hybrid basis. The role leads the Post-Quantum Cryptography (PQC) readiness program and modernizes Data Loss Prevention (DLP) across the enterprise, working across infrastructure, cloud, networking, identity, workplace technologies and applications. It is a hands-on, technical position, not a governance-only one.

Key responsibilities

• Develop and enforce data security policies and procedures across Novartis businesses, and design the data security architecture in line with the ISC policy framework.
• Act as technical lead for the PQC readiness program and support the evolution of data security solutions from evaluation to implementation.
• Review technology standards and controls, support audits of security policies, and communicate with stakeholders and report to management.
• Define and deliver strategic plans for implementing information technologies, and maintain architecture diagrams and documentation.
• Research and evaluate new data security technologies, break down strategic objectives into solution requirements, and contribute to product, service and infrastructure strategies.

Required profile

• Degree in a business or technical field or comparable education/experience.
• 15+ years of experience in security, with at least 5 years in architecture and 5+ years working for or serving a large enterprise like Novartis.
• Proven project management experience affecting multiple divisions and departments, and experience managing compliance requirements such as SOX, GxQ/CSV, E-compliance, records management and privacy.
• Knowledge of risk management frameworks such as COSO, ISO 27001, COBIT, ISO 24762, BS 25999, NIST, ISF and ITIL.
• Strong leadership, communication and stakeholder management skills, and experience reporting to senior management.

Required skills

• Deep knowledge of cryptography: encryption, key exchange, hashing, digital signatures, PKI and certificate lifecycle management, and Post-Quantum Cryptography concepts.
• Experience designing data encryption architectures for data at rest and in transit, and knowledge of key management and HSM/KMS solutions.
• Understanding of digital workspace, data protection, AI security, network security, IAM, SIEM and vulnerability management.
• Desirable: familiarity with Enterprise Architecture frameworks such as TOGAF.