Snr. Spec. DDIT ISC Gov Control Assessment

Job Description

Assist in activities to implement and monitor enterprise information security risk and control processes to protect patients and company information both internally and at third parties. -Support implementation of security governance principles and processes across functions leveraging enterprise policies, awareness and training programs as we'll as in-country business partnering. Key Responsibilities: Collaborate with business to understand threats and ensure Novartis most critical business processes and data is protected. Ensure implementation of the information management framework to safeguard the integrity, confidentiality and availability of information owned, controlled or processed by Novartis. Deliver effective security training and awareness programs and coordinate delivery across functions and countries. Support software asset and records management governance and deliver services to support business operations as we'll as for mergers, acquisitions and divestitures. Assess security risks around third parties and deliver services to reduce exposure -Perform assessments and verification of achieved quality levels and risks in respect to external legislative and regulatory requirements, as we'll as internal policies -Establish close collaboration with stakeholders to facilitate alignment with policies, risks as we'll as internal and external audits. Monitor adherence of the defined governance principles to ensure expected value is delivered -Take responsibility to ensure adherence with Security and Compliance policies and procedures within Information Management Policy scope Essential Requirements Influencing without authority. Relationship Management. Strategy Development. Accountability. Experience working cross-functionally and trans-nationally. Interactions with senior management. Collaborating across boundaries. Desirable Requirements: Business Partnering. Communication Skills. Cyber Security. Influencing Skills. Information Security Risk Management. IT Governance. Stakeholder Management.