Assoc. Dir. DDIT ISC Risk Governance

Hace 5 días

Barcelona, Cataluña, España Novartis Jornada completa
Overview

In this role you will lead the design and ongoing improvement of enterprise DD&IT risk governance, ensuring compliant, transparent and auditable processes. You will enable adoption through fit-for-purpose processes, technology, automation, and data-driven insights. You will collaborate with global stakeholders to align governance with regulatory requirements and business priorities, delivering risk-based decision support and streamlined operations. This is an opportunity to shape risk governance at scale within a leading pharmaceutical company.

Compensaciones / Beneficios
  • flexible and hybrid working options
  • minimum 14 weeks paid parental leave
  • insurance plans
  • retirement plans
  • wellbeing resources
  • global recognition programs
Responsabilidades
  • Define and continually improve risk, issue, and exception governance processes aligned with policies and regulatory requirements
  • Establish governance frameworks with clear roles, decision rights, approvals and escalation paths
  • Manage lifecycle of risks, issues, exceptions, controls and remediation actions
  • Ensure identification, assessment, monitoring, reporting, renewal and closure with auditability and transparency
  • Escalate material risks and systemic concerns to appropriate governance bodies
  • Lead process simplification, standardization, and continuous improvement across DD&IT risk governance
  • Evaluate and optimize tools, workflows and technology solutions, including integration and modernization
  • Identify and implement automation and responsible AI opportunities with proper oversight and accountability
  • Define risk data, metrics, analytics, reporting and actionable insights for decision-making
  • Drive stakeholder adoption, capability building and cross-functional collaboration to strengthen governance and process excellence
Requisitos principales
  • University degree in information technology, information security, risk management, business administration, engineering or related discipline; postgraduate qualification or professional certification is an advantage
  • Significant experience in technology or enterprise risk management, information security, compliance governance, process management or digital enablement
  • Proven ability to define or improve enterprise governance frameworks and cross-functional processes
  • Experience evaluating enterprise tools and driving process simplification and sustainable adoption
  • Understanding of automation, data analytics and AI-enabled ways of working with responsible oversight
  • Experience operating in a global, matrixed and regulated organization and influencing senior stakeholders without direct authority
  • enterprise mindset
  • strategic and systems thinking
  • sound judgment
  • Information Security Risk Management
  • IT Governance
  • Stakeholder Management