About the role
Salary Range:
€57,900.00 - €107,500.00
Job Description Summary
The Associate Director DDIT ISC Risk Governance & Enablement is accountable for defining, governing and continuously improving the enterprise processes and enabling capabilities for managing DD&IT risks, issues and exceptions.
The role establishes simple, consistent and effective governance across DD&IT and enables its adoption through fit-for-purpose processes, technology, automation, artificial intelligence, data and insights. The role evaluates existing processes and tools and drives sustainable improvements that strengthen transparency, accountability, user experience and risk-based decision-making.
Working in close collaboration with stakeholders across DD&IT, ISC and other relevant Novartis functions, the role ensures that risk governance processes and enabling capabilities remain aligned with applicable Novartis requirements, external standards and regulatory requirements, evolving business needs and DD&IT strategic priorities.
Job Description
Key Responsibilities :
• Define and continuously improve DD&IT risk, issue, and exception governance processes aligned with policies, standards, and regulatory requirements.
• Establish clear governance frameworks, including roles, accountabilities, decision rights, approvals, and escalation paths.
• Manage the lifecycle and relationships between risks, issues, exceptions, controls, and remediation actions.
• Ensure effective identification, assessment, monitoring, reporting, renewal, and closure with strong auditability and transparency.
• Drive timely escalation of material risks and systemic concerns to appropriate governance bodies.
• Lead process simplification, standardization, harmonization, and continuous improvement across DD&IT risk governance.
• Evaluate and optimize tools, workflows, and technology solutions, including integration, consolidation, and modernization initiatives.
• Identify and implement automation and responsible AI opportunities while ensuring appropriate oversight, security, traceability, and accountability.
• Define and enhance risk data, metrics, analytics, reporting, and actionable insights to support informed decision-making.
• Drive stakeholder adoption, capability building, and cross-functional collaboration to strengthen risk governance, automation, and process excellence across DD&IT.
Essential Requirement :
• University degree in information technology, information security, risk management, business administration, engineering or another relevant discipline; postgraduate qualification or relevant professional certification is an advantage.
• Significant relevant experience in technology or enterprise risk management, information security, compliance governance, process management, digital enablement or a related field.
• Demonstrated experience defining or improving enterprise governance frameworks and cross-functional processes and translating requirements into practical, sustainable capabilities.
• Experience evaluating enterprise tools, workflows or technology-enabled processes and driving process simplification, continuous improvement and sustainable adoption.
• Understanding of automation, data analytics and AI-enabled ways of working, including responsible human oversight.
• Experience operating in a global, matrixed and regulated organization and influencing senior stakeholders without direct authority.
Desirable Requirement:
• Enterprise mindset, strategic and systems thinking, sound judgment, constructive challenge, cross-functional collaboration, learning agility and accountability.
• Fluent written and spoken English; additional languages are an advantage.
Benefits & Rewards
At Novartis, we’re committed to reimagining medicine together - and
Apply on employer site ↗