Functional Security ArchitectAMS

Job Description

277112BR

Job Description

NBS IT, Application Management Services (AMS) provides digital technologies to transform and establish next generation ERP solutions, provides Service Operations for internal functions such as CBS, CIT, DIT and TOQIT, as well as provides global centers of excellence. AMS focuses on supplier management, driving standardization and increaing process effieciency across the Novartis application platforms. The Functional Security Architect (FSA) will work with the AMS team to ensure solutions are security designed, following approved security patterns and providing ongoing security consulting and expertise to support the following activities: a) Review security architecture of legacy applications b) Review security architecture of operational changes, enhancements, and other releases related to production systems c) Support and provide recommendations to AMS for remediating security gaps The successful candidate will be a strong communicator with deep technical and security skills, especialy pertaining to ERP security. The individual must be highly collaborative as they will need to work closely with application managers, engineers, 3rd party vendors, software operational support resources, developers, architects and engineers. As part of daily activities, the Functional Security Architect will ensure secure-by-design principles are followed for applications and technical solutions AMS oversees by providing consultatation and remediation recommendations through-out the application lifecycle. In addition to accountabilities listed above in Job Purpose: Provides in depth expertise to AMS on IT security principles, ensures controls are included as technical requirements to ensure security-by-design best practices Advises to AMS Security on patterns and solutions, including associated application, infrastructure and services in regards to IT Security Reviews, creates and challenges defined IT security related internal standards Acts as single point of contact, collaborating closely with other Security Architects and IT Architects on IT security related matters Promotes IT Security culture within the business and application management team Defines pragmatic solutions and recommends alternatives that meet or exceed security requirements Reports on security status of projects Builds external network regarding IT security relevant to the business function Performs risk/threat assessment of all IT project related to the function Manages pool of external security and solution architects assigned to portfolio Manages prioritization of security assessment for the function Leverages application security risk assessment pool for low impact projects Adoption of secure design and coding practices within a business function Apply standard Novartis solutions consistently per patterns and practice guidelines Responsiveness and timely delivery of solutions and recommendations that meet business timelines and customer expectations Good cultural orientation and strong influencer of information risk management, and information security Adequacy and correctness of the security architecture meeting its functional and non-functional (qualitative) needs and requirements

Minimum requirements

o University working and thinking level, degree in business/technical/scientific area or comparable education/experience Excellent English (spoken and written) - C2 language proficiency; mastery level 10+ years work experience, 7 years within Information Security management. 2+ years experience in sr. management position with demonstrated leadership skills in global matrix orginization 5+ years as an IT security expert Expert knowledge of enterprise IT infrastructure technology, systems, vulnerability management, and change management processes, especially in large scale implementations Desirable: o Professional information security certification, such as CISSP, CISM or ISO 27001 auditor / practitioner is preferred. Professional (information system) risk or audit certification such as CIA, CISA or CRISC is preferred o CSSLP, GSSP, ECCSP, CASS

Division

NBS

Business Unit

IT NBS

Country

India

Work Location

Hyderabad, AP

Keyskills :
delivery documentation siem solutiondesign aaa enterpriseitinfrastructure applicationmanagementservices iso27001 itsecurity securityrisk riskmanagement riskassessment codingpractices nf mationrisk chan