Security Architect Data Protection

Job Description

To continue to add even greater value for the business we need to have the right people with the right capabilities in the right location. We need to be customer-oriented and focus on bringing the best services and solutions to the business both globally and locally to support our patients. NBS IT offers this extraordinary work experience with a real opportunity to develop in a highly fast-paced technology-driven environment where collaboration and innovation are at the heart of who we are and what we do. Position Purpose: The Data Protection Security Architect will work across Information Security and Risk Management and in partnership with Data Privacy and Legal functions with a focus on all aspects of research, design, implementation and governance related to the Data Protection domain. This includes supporting project teams in choosing the right security architecture within the Data Protection domain to ensure Novartis data is protected according to the business requirements. Responsibility will be taken for the definition and maintenance of the overall standards and direction of architecture within the Data Protection domain; ensuring efficient and effective elaboration and validation of the architecture and communication within ISRM Security Architecture organization and with key stakeholders. Major Accountabilities: Develop and enforce security policies and procedures related data protection across datacentres, networks databases and applications to meet business and regulatory requirements Design security measures and overall data protection architecture for the IT landscape in line with the ISRM policy framework Support and continually review technology standards and controls related to data protection and recommend information technology strategies, policies, and procedures Identify design problems within the Data Protection domain Support projects to evolve data protection solutions from evaluation to implementation and assist the delivery of the operational model Support the auditing of security policies and procedures Management communication with key stakeholders and provide reports to management Provide ongoing support to maintain the Data Protection domain s effectiveness and efficiency by defining, delivering, and supporting strategic plans for implementing information technologies Develop and maintain relationships with key stakeholders and vendors Research and evaluate new data protection technologies Support the direction of technological research by learning the organizational goals, strategies and business drivers Develop and maintain architecture diagrams and documentation related to data protection processes and procedures KPI : Consistent security architecture Number of new security measures/ applications/ tools in the domain IT Security training related to Data Protection Stakeholder satisfaction with performance supporting projects Re-use of existing architecture patterns to define new solution Effective management of information risk status leading to reduced audit findings. Projects pass without major security deficiencies in regards to data protection security Complete coverage of methodologies and basic building blocks for security Clear metrics on adherence to risk acceptance as well as adherence to standards across NVS environment Up to date roadmap on legacy/ deprecated/ standard/ upcoming technology Minimum requirements University working and thinking level, degree in business/ technical/ scientific area or comparable education/ experience Professional certifications i. e. CISSP, CISM or ISO27001 etc English and other local language if needed 7+ years of working architecture experience; 5+ years of working experience with data protection technologies and regulations. Experience in reporting to and communicating with senior level management (with and without IT background) , with and without in depth risk management background on information risk topics Excellent written and verbal communication and presentation skills; interpersonal and collaborative skills. Excellent understanding and knowledge of general IT infrastructure technology, systems and management processes Experience of sourcing complex IT services, working closely with vendors and making full use of their capabilities Proven experience to initiate and manage projects that will affect other divisions, departments and functions, as well as the corporate environment.,

Keyskills :
deliverydocumentationsiemaaaolutiondesignhpdataprotectorprojectteamsitservicesdataprivacyitsecurityriskmanagement