{"id":3236098,"url":"https://alion.io/job/novartis-dir-ddit-isc-functional-sec-arch-iam","title":"Dir. DDIT ISC Functional Sec. Arch IAM","company":{"id":5824,"name":"Novartis","domain":"novartis.com","url":"https://alion.io/company/novartis","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":82,"open_postings":69,"ghost_share":0,"stale_share":0.725,"repost_share":0.014,"time_to_fill_p50_days":28,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Barcelona, Spain"],"countries":["ES"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":69000,"max":128100,"currency":"EUR","period":"year","gross":null,"usd_annual":143527},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-22T00:00:00Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-10-29T07:53:28Z","board_verified":true,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"Salary Range:\n€69,000.00 - €128,100.00Job Description Summary\nDir. DDIT ISC Functional Security Architect role provides enterprise-level architectural leadership and specialist security expertise for Identity and Access Management (IAM). The role partners closely with Functional Security Architects, Enterprise Architects, Platform Architects, business stakeholders and IAM capability teams to ensure that solutions implement secure, scalable and reusable identity patterns aligned with enterprise security standards.It also contributes to the strategic development and maturity of enterprise IAM capabilities, including Identity Governance and Administration (IGA), authentication, authorization, federation, Privileged Access Management (PAM), machine/workload identities and emerging identity requirements associated with AI and autonomous agents.\nA key focus of the role is developing IAM architecture for AI-enabled applications and Agentic AI, including identities for AI agents, delegated authority, agent-to-agent and agent-to-application access, human-to-agent delegation, workload identities, least-privilege authorization, JIT access, credential and secret management, lifecycle governance, auditability and accountability.\nJob Description\nKey Responsibilities:\nReview, approve and govern IAM technology variants and architecture patterns against agreed enterprise security and architecture standards.\nDrive IAM technology and architecture standards in close collaboration with Enterprise Architecture, Security Architecture, IAM capability teams and Architecture Governance.\nAct as the IAM subject-matter expert for Functional Security Architects, providing IAM-specific architecture guidance, design reviews, reusable patterns and risk advice for projects and programmes.\nSupport development and evolution of enterprise IAM capabilities and their associated target architectures, roadmaps and reference architectures.\nAdvance the maturity of IAM architecture and governance processes, ensuring IAM architectural decisions and standards remain relevant as business, security and technology requirements evolve.\nDrive relevant architecture KPIs and metrics to assess adoption, architectural compliance, exceptions and maturity of IAM capabilities.\nIdentify opportunities for consolidation, standardisation and retirement of overlapping IAM technologies and patterns. Proactively communicate IAM risks and architectural considerations to business, security and technology stakeholders.\nParticipate in evaluation of new IAM and security technologies, providing a holistic assessment of security, architecture, interoperability, lifecycle and operational considerations.\nEngage early in solution and demand governance to ensure IAM requirements are identified before detailed solution design and implementation.\nPromote reuse of approved enterprise IAM capabilities and patterns rather than creation of application-specific identity solutions. Build and maintain an IAM architecture Community of Practice, facilitating knowledge sharing and continuous improvement.\nEssential Requirement:\nStrong experience in Identity and Access Management architecture, security architecture or enterprise security architecture.\nDeep understanding of identity lifecycle management, authentication, authorisation, federation, access governance and privileged access.\nStrong understanding of OAuth 2.0, OpenID Connect, SAML 2.0, SCIM and modern identity-federation patterns.\nExperience architecting enterprise SSO, MFA and passwordless authentication solutions.\nStrong understanding of RBAC, ABAC, policy-based access control, least privilege and separation of duties.\nExperience with identity governance and administration and privileged access management. Understanding of cloud-native identity, workload identity, APIs, service accounts and other non-human identities.\nKnowledge of Zero Trust architecture and identity-centric security.Ability to translate security requirements into practical, reusable architecture patterns.\nStrong stakeholder-management skills and ability to provide specialist IAM guidance to Solution Security Architects, engineering teams and enterprise architects.\nDesirable Requirement:\nUnderstanding of security architecture for Generative AI and AI-enabled applications.\nKnowledge of IAM challenges associated with autonomous and semi-autonomous AI agents. Understanding of agent identity, workload identity, delegated authorisation and machine-to-machine trust.\nBenefits & Rewards\nAt Novartis, we’re committed to reimagining medicine together - and rewarding the people who make it happen.\nExpected Annual Base Salary Range for role: 69,000.00 - 128,100.00 EUR\nThe base salary offered is determined based on gender-neutral objectives, such as relevant skills, competencies and experience in accordance with the Novartis pay setting policy and upon joining Novartis will be reviewed periodically.\nIn addition to your base salary, you may be eligible for a performance-based bonus depending on certain performance parameters.\nThe rewards of being part of our team go far beyond base pay and incentives. We also offer a variety of competitive benefits in kind to help you thrive personally and professionally, such as insurance plans, retirement plans, wellbeing resources and global recognition programs. In addition, we provide flexible and hybrid working options, where possible, and minimum 14 weeks paid parental leave.\nPay equity is a fundamental principle of our employment policy and reflects our commitment to create a diverse, equitable and inclusive environment that treats all employees with dignity and respect, as outlined in our Code of Ethics.\nRead our brochure to learn more about our global total rewards offering:\nhttps://www.novartis.com/sites/novartis_com/files/novartis-life-handbook.pdf\nNote: Benefits and compensation may vary by country and are subject to local legal requirements, including provisions of collective bargaining agreements where applicable. A full overview of your compensation package, including any relevant collective bargaining agreement details applicable to your role based on your employment location and Novartis employer entity, will be communicated separately to you during the application process.\nCommitment to Diversity and Inclusion / EEO\nNovartis is committed to building an outstanding, inclusive work environment and diverse teams’ representative of the patients and communities we serve.\nYou’ll receive: You can find everything you need to know about our benefits and rewards in the Novartis Life Handbook. https://www.novartis.com/careers/benefits-rewards Commitment to Diversity and Inclusion: Novartis is committed to building an outstanding, inclusive work environment and diverse teams' representative of the patients and communities we serve.\nSkills Desired\nBusiness Architecture, Business Value Creation, Change Management, Consulting, Digital Capabilities, Enterprise Architecture (EA), Influencing Skills, IT Governance, Solution Architecture, Stakeholder Management","description_format":"text","description_chars":7053,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Hybrid work","Parental leave","Retirement plans"],"hiring_locations":[{"name":"Spain","iso":"ES","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Oncology Therapeutics","Neurology & CNS Therapeutics","Immunology & Inflammation Therapeutics","Cardiometabolic Therapeutics"],"lifecycle":[{"event":"open","at":"2026-10-25T11:44:13Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.626,"p_room":1,"age_days":7,"expected_fill_days":28,"reasons":["conf:2","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-29T05:49:05Z"},"pay":{"stated_usd_annual":143527,"is_top_pay":false},"html_url":"https://alion.io/job/novartis-dir-ddit-isc-functional-sec-arch-iam","json_url":"https://alion.io/job/novartis-dir-ddit-isc-functional-sec-arch-iam.json","meta":{"generated_at":"2026-10-29T11:32:45Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17559,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5824},"rest":"https://alion.io/mcp/rest/get_company?id=5824"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnovartis-dir-ddit-isc-functional-sec-arch-iam"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnovartis-dir-ddit-isc-functional-sec-arch-iam"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnovartis-dir-ddit-isc-functional-sec-arch-iam"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/novartis-dir-ddit-isc-functional-sec-arch-iam\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnovartis-dir-ddit-isc-functional-sec-arch-iam"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3236098}},{"tool":"search_jobs","arguments":{"company":"novartis.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3236098},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}