Associate Director DDIT ISC Detection & Response

Salary Range: Kč1,120,210.00 - Kč2,080,390.00   Job Description Summary The Detection and Response Associate Director will play a strategic role within the Novartis Cyber Security Operations Center (CSOC), a globally integrated security organization dedicated to protecting Novartis against sophisticated and evolving cyber threats. This position combines deep technical expertise, strategic influence, and AI-driven innovation to advance global threat detection, investigation, and incident response capabilities. The role will drive operational excellence, champion emerging technologies and intelligent automation, and contribute to the continuous evolution of cyber defense at Novartis. Working closely with global cybersecurity leadership, engineering teams, and key business stakeholders, the Associate Director will lead strategic initiatives, strengthen cyber resilience, and drive meaningful improvements across security operations. The position is designed for an experienced cybersecurity professional passionate about solving complex challenges, advancing innovation, and delivering measurable security impact.   Job Description #LI-Hybrid Location: Prague Key Responsibilities: • Shape and influence global TDR strategy, driving operational excellence, innovation, and advanced cyber defense capabilities. Serve as a senior technical authority, providing strategic guidance on complex security challenges and critical incident response activities. • Drive AI adoption, intelligent automation, and emerging technologies to transform detection and response capabilities. • Lead strategic initiatives in collaboration with global cybersecurity leadership, engineering teams, and key stakeholders. • Oversee and enhance security monitoring, threat detection, and triage capabilities across the Novartis IT ecosystem. Leverage SIEM, advanced analytics, and threat intelligence to identify sophisticated threats and improve detection coverage. • Drive improvements in detection engineering, security controls, and capabilities against evolving TTPs. • Serve as a senior escalation point for complex security incidents involving sophisticated threat actors. • Lead critical investigations and response activities, including forensic analysis, containment, stakeholder communication, and remediation. • Translate incident findings into actionable recommendations to strengthen organizational cyber resilience. • Drive continuous improvement of TDR processes, investigation methodologies, and response playbooks. Collaborate with engineering teams to advance security orchestration, automation, and technology integration. • Provide technical mentorship, promote investigation quality, and influence best practices across global TDR teams. Essential Requirement: • 8+ years of cybersecurity experience, including 5+ years in Security Operations, Threat Detection, Incident Response, and Threat Hunting. • Proven experience leading complex security investigations and driving cross-functional initiatives in large enterprise environments. • Strong track record of enhancing detection capabilities, incident response processes, operational efficiency, and investigation quality. • Experience mentoring security analysts and influencing stakeholders across teams without direct people management responsibility. • Hands-on expertise with SIEM, EDR/XDR, Detection Engineering, Security Telemetry, and Incident Response tools such as Microsoft Sentinel, Microsoft Defender, and Splunk. • Solid knowledge of cloud security investigations across Azure and/or AWS, including identity, endpoint, and cloud telemetry analysis. • Skilled in leveraging MITRE ATT&CK, threat intelligence, and attacker behavior analysis to improve detection and response strategies. • Proficiency in secu