113 days ago on sjobs.brassring.com

Senior Security Architect

Novartis Pharma Schweiz AG

  • Work region
  • Sector
  • Employment type
  • Position

 Please refer to JobSuchmaschine in your application

Senior Security Architect

Job ID 216969BR Position Title Senior Security Architect Division NBS Business Unit IT NBS Country Switzerland Work Location Basel Company/Legal Entity Novartis Pharma AG Functional Area Information Technology Job Type Full Time Employment Type Regular Job Description The Senior Security Architect will work across information security and risk management and with all information technology disciplines to ensure new and existing applications solutions and systems designed, implemented and operated as per defined policies, standards, required industry regulations and associated security guidance, as well as industry good practices. The successful candidate will be a strong communicator with deep technical skills and, more importantly, a pragmatist. The individual must be highly collaborative as they will need to influence senior business leaders, functional leadership, project and application managers, quality and regulatory managers, other architects, engineers and developers. The Senior Security Architect will be responsible for the entire portfolio of new and existing applications for the function he/she represents to ensure proper architecture oversight, risk assessment, remediation plans and overall compliance and security through the SDLC lifecycle.

MAJOR ACCOUNTABILITIES:

In addition to accountabilities listed above in Job Purpose:

• Provides in depth expertise to IT functions on IT security topics in the design implementation and risk assessment remediation of any IT solution

• Supports IT projects in secure design and build aligned to supporting function

• Advise to IT operations responsible for security patterns and solutions, including associated infrastructure and services in regards to IT Security

• Review, request and challenge defined IT security related internal standards

• Collaborates closely with other Security Architects and IT Architects on IT security related matters

• Promotes IT Security culture within business, compliance and IT responsible for medical devices design and operations

• Solution oriented, can define various pragmatic alternatives leading to appropriate IT security results

• Reports on security status of projects and operations across associated function for all IT Security patterns

• Ensures industry network regarding IT security relevant to the associated company function

• Perform risk/threat assessment of all IT project related to the function

• Manage pool of solution architects assigned to portfolio

• Manage prioritization of security assessment an design resources for the function

• Leverage application security risk assessment pool for low impact projects
Minimum requirements •Essential: o University working and thinking level, degree in business/technical/scientific area or comparable education/experience o Professional information security certification, such as CISSP,

•Fluency (written and spoken) in English

•10+ years of working experience, 7 of those years with Information Security management

•Demonstrated leadership skills: >2 years’ experience in senior management positions in a matrix organization

•5+ years as an IT security expert

•Experienced IT security architect with broad and in-depth technical, analytical and conceptual skills

•Experience in reporting to and communicating with senior level management (with and without IT background, with and without in depth risk management background) on information risk topics

•Excellent written and verbal communication and presentation skills; interpersonal and collaborative skills; and the ability to communicate information risk-related concepts to technical as well as nontechnical audiences, and to audiences with a risk management profile as well as those with a less outspoken risk management profile.

•Excellent understanding and knowledge of general IT infrastructure technology, systems and management processes

•Proven experience