Associate Director DDIT ISC Risk Governance & Enablement – Risk Governance

Job Description

Assoc. Dir. DDIT ISC Risk Governance & Enablement | Novartis

The Tone:
This is an Associate Director role at Novartis. Novartis is committed to reimagining medicine together. This role is pivotal in defining, governing, and continuously improving the enterprise processes and enabling capabilities for managing DD&IT risks, issues, and exceptions. It focuses on establishing simple, consistent, and effective governance across DD&IT, enabling its adoption through fit-for-purpose processes and technology. The work ensures risk governance aligns with Novartis requirements, external standards, and evolving business needs.

The TL;DR
• Role: Full Time
• Pay: EUR57,900.00 – EUR107,500.00 yearly
• Mission: Define, govern, and continuously improve enterprise processes and capabilities for managing DD&IT risks, issues, and exceptions.

What You’ll Actually Do
• Define: Define and continuously improve DD&IT risk, issue, and exception governance processes, ensuring alignment with policies, standards, and regulatory requirements.
• Govern: Establish clear governance frameworks, including roles, accountabilities, decision rights, approvals, and escalation paths for DD&IT risks.
• Manage: Manage the lifecycle and relationships between risks, issues, exceptions, controls, and remediation actions to ensure strong auditability and transparency.
• Improve: Lead process simplification, standardization, harmonization, and continuous improvement across DD&IT risk governance.
• Optimize: Evaluate and optimize tools, workflows, and technology solutions, including identifying and implementing automation and responsible AI opportunities.

The Must-Haves
• Background: University degree in information technology, information security, risk management, business administration, engineering, or a relevant discipline.
• Experience: Significant experience in technology or enterprise risk management, information security, compliance governance, process management, or digital enablement. This includes demonstrated experience defining or improving enterprise governance frameworks, translating requirements into sustainable capabilities, and operating in a global, matrixed, and regulated organization.
• Skills: Understanding of automation, data analytics, and AI-enabled ways of working with responsible human oversight, alongside business acumen, influencing skills, information security risk management, IT governance, and stakeholder management.
• Bonus: A postgraduate qualification or relevant professional certification, and fluent written and spoken English with additional languages being an advantage.