Job Description Summary

The Associate Director DDIT ISC Risk Governance & Enablement is accountable for defining, governing and continuously improving the enterprise processes and enabling capabilities for managing DD&IT risks, issues and exceptions. The role establishes simple, consistent and effective governance across DD&IT and enables its adoption through fit-for-purpose processes, technology, automation, artificial intelligence, data and insights. The role evaluates existing processes and tools and drives sustainable improvements that strengthen transparency, accountability, user experience and risk-based decision-making. Working in close collaboration with stakeholders across DD&IT, ISC and other relevant Novartis functions, the role ensures that risk governance processes and enabling capabilities remain aligned with applicable Novartis requirements, external standards and regulatory requirements, evolving business needs and DD&IT strategic priorities.

Key Responsibilities:

• Define and continuously improve DD&IT risk, issue, and exception governance processes aligned with policies, standards, and regulatory requirements.
• Establish clear governance frameworks, including roles, accountabilities, decision rights, approvals, and escalation paths.
• Manage the lifecycle and relationships between risks, issues, exceptions, controls, and remediation actions.
• Ensure effective identification, assessment, monitoring, reporting, renewal, and closure with strong auditability and transparency.
• Drive timely escalation of material risks and systemic concerns to appropriate governance bodies.
• Lead process simplification, standardization, harmonization, and continuous improvement across DD&IT risk governance.
• Evaluate and optimize tools, workflows, and technology solutions, including integration, consolidation, and modernization initiatives.
• Identify and implement automation and responsible AI opportunities while ensuring appropriate oversight, security, traceability, and accountability.
• Define and enhance risk data, metrics, analytics, reporting, and actionable insights to support informed decision-making.
• Drive stakeholder adoption, capability building, and cross-functional collaboration to strengthen risk governance, automation, and process excellence across DD&IT.

Essential Requirement:

• University degree in information technology, information security, risk management, business administration, engineering or another relevant discipline; postgraduate qualification or relevant professional certification is an advantage.
• Significant relevant experience in technology or enterprise risk management, information security, compliance governance, process management, digital enablement or a related field.
• Demonstrated experience defining or improving enterprise governance frameworks and cross-functional processes and translating requirements into practical, sustainable capabilities.
• Experience evaluating enterprise tools, workflows or technology-enabled processes and driving process simplification, continuous improvement and sustainable adoption.
• Understanding of automation, data analytics and AI-enabled ways of working, including responsible human oversight.
• Experience operating in a global, matrixed and regulated organization and influencing senior stakeholders without direct authority.

Desirable Requirement:

• Enterprise mindset, strategic and systems thinking, sound judgment, constructive challenge, cross-functional collaboration, learning agility and accountability.
• Fluent written and spoken English; additional languages are an advantage.

Benefits & Rewards

At Novartis, we’re committed to reimagining medicine together - and rewarding the people who make it happen. Expected Annual Base Salary Range for role: 57,900.00 - 107,500.00 EUR. The base salary offered is determined based on gender-neutral objectives, such as relevant skills, competencies and experience in accordance with the Novartis pay setting policy and upon joining Novartis will be reviewed periodically. In addition to your base salary, you may be eligible for a performance-based bonus depending on certain performance parameters. The rewards of being part of our team go far beyond base pay and incentives. We also offer a variety of competitive benefits in kind to help you thrive personally and professionally, such as insurance plans, retirement plans, wellbeing resources and global recognition programs. In addition, we provide flexible and hybrid working options, where possible, and minimum 14 weeks paid parental leave.

Read our brochure to learn more about our global total rewards offering: Novartis Life Handbook. Note: Benefits and compensation may vary by country and are subject to local legal requirements, including provisions of collective bargaining agreements where applicable. A full overview of your compensation package, including any relevant collective bargaining agreement details applicable to your role based on your employment location and Novartis employer entity, will be communicated separately to you during the application process.

Commitment to Diversity & Inclusion

Novartis is committed to building an outstanding, inclusive work environment and diverse teams representative of the patients and communities we serve.

Skills Desired

• Business Acumen
• Influencing Skills
• Information Security Risk Management
• IT Governance
• Stakeholder Management