Jobs / United States / Novartis Pharmaceuticals Corporation
GRC Compliance Senior Analyst
Novartis Pharmaceuticals Corporation · 🇺🇸 Durham
Sponsorship verdict
Sponsorship possible
One solid signal, not two — worth applying, and worth asking about sponsorship early.
- Employer is on a government sponsor recordThe US Department of Labor certified 75 H-1B/E-3 labor condition applications for this employer between Oct 2025 and Jun 2026 (latest Jun 2026) — the step every H-1B hire needs first. USCIS also records 31 H-1B approvals in FY2023. Source: LCA disclosure data (US Department of Labor (OFLC)).
- The posting doesn’t mention sponsorshipSilence isn’t a refusal — ask the recruiter before investing much time.
- No salary bar for this routeH-1B has no fixed salary bar: the employer must pay at least the prevailing wage for the role and area. Cap-subject employers enter a lottery weighted by wage level. Source: https://www.federalregister.gov/documents/2025/12/29/2025-23853/weighted-selection-process-for-registrants-and-petitioners-seeking-to-file-cap-subject-h-1b, rules effective 2026-02-27.
- Confirmed live todayWhen a source last listed this job as open.
US H-1B: cap-subject employers enter a lottery weighted by wage level — Level I gets 1 entry, Level IV gets 4 (DHS projected selection odds ≈15% at Level I to ≈61% at Level IV). Universities and non-profit research employers are cap-exempt. The $100,000 fee for new petitions from abroad is currently blocked by a court order (appeal pending).
A verdict summarises public evidence; it is not legal advice and never a guarantee — the employer and the immigration authority decide. Sign in to factor in where you can already work.
Or apply yourself on the official page →
Sponsor Radar — Novartis Pharmaceuticals Corporation
The US Department of Labor certified 75 H-1B/E-3 labor condition applications for this employer between Oct 2025 and Jun 2026 (latest Jun 2026) — the step every H-1B hire needs first. USCIS also records 31 H-1B approvals in FY2023. Source: LCA disclosure data (US Department of Labor (OFLC)).
Past sponsorship or register membership never guarantees sponsorship for this vacancy or for you. Full Sponsor Radar for Novartis Pharmaceuticals Corporation →
About the role
Job Description Summary Location: Durham,(North Carolina), US #LI-Hybrid 3 days/week in office Internal job title: Sr. Spec. DDIT ISC Operations About the Role: The GRC Compliance Senior Analyst and support information security, risk, and compliance activities across business applications, IT/OT services, and manufacturing sites. The role will ensure solutions are designed, developed, and operated in accordance with organizational security standards, regulatory requirements, and governance frameworks. They will drive continuous improvement of security compliance programs, strengthen risk management practices, and maintain audit and inspection readiness. Job Description Key Responsibilities: • Provide ISC governance/risk advice and support for Operations IT and OT Function and oversee a specific governance/risk area globally. Ensure IT/OT project risks are managed in line with ISC strategy, the policy framework, laws and regulations and industry standards. • Ensure monitoring of information risk and proactive mitigation of issues. Continuous support risk-based treatment of threats, issues and vulnerabilities. Guide teams and support them in understanding the risk exposure and technical safeguards. • Deliver global information governance programs like risk management, data classification, storage & transmission guidelines, audit readiness support, etc. • Maintain strong knowledge of internal controls and internal risk and control frameworks/standards or the Information Management Policy Framework. Systematically support implementation and monitoring of the same. • Provide KPI reporting, dashboards, and continuous improvements to ensure compliance. • Analyse impact of new technologies and regulatory changes on information security considering Cyber Security and Data Privacy Acts, Laws, and Regulations • Ensure good communication and collaboration with the Service Delivery Teams of the DDIT operations and other support partners. Share new ideas, be proactive and have desire to deliver business value. • Leverage AI and automation to streamline compliance activities, including risk assessments, control documentation, testing, issue management, and audit support. Essential Requirements: • Over 8+ years of experience in Business Information Security and Compliance, IT Risk management, Audit management, Information Governance and Management, GRC • University degree in business/technical/scientific area or comparable education/experience • Extensive knowledge and experience to efficiently manage risks, vulnerabilities and Issues within the function. • Disciplined approach in managing the functional & operational risks, successful engagement with stakeholders, advocacy to drive Information Security Compliance activities. • Demonstrated ability to collaborate effectively and build successful partnerships with key stakeholders, vendors, support teams, and internal cross-functional teams. • Experience with Good Practice Quality guidelines and regulations (GxP) • Strong stakeholder management skills (Senior Business Execs, IT Site Heads, etc.) • Excellent communication skills with proficiency in English (written and spoken) Desirable requirements: • Experience with OT security compliance and implementing policies in manufacturing setup, ideally in pharma • AI knowledge and experience • A professional Information Security certifications, either from ISACA like CISM, CRISC, CISA and/or ISC2 like CISSP, CCSP, etc. Commitment to Diversity & Inclusion: We are committed to building an outstanding, inclusive work environment and diverse teams representative of the patients and communities we serve. Why Novartis? Our purpose is to reimagine medicine to improve and extend people’s lives and our vision is to become