{"id":2920931,"url":"https://alion.io/job/novartis-enterprise-security-architect-data-security-2","title":"Enterprise Security Architect – Data Security","company":{"id":5824,"name":"Novartis","domain":"novartis.com","url":"https://alion.io/company/novartis","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":81,"open_postings":60,"ghost_share":0,"stale_share":0.767,"repost_share":0.017,"time_to_fill_p50_days":29,"computed_at":"2026-10-26T05:57:25Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Barcelona, Spain","Israel"],"countries":["ES","IL"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":57900,"max":107500,"currency":"EUR","period":"year","gross":null,"usd_annual":120563},"salary_estimate":null,"experience_years_min":15,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DLP","optional":false},{"name":"ITIL","optional":false},{"name":"PKI","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-09-07T00:00:00Z","employer_posted_date":"2026-09-07","last_verified_at":"2026-10-25T13:42:02Z","board_verified":true,"closed_at":null,"days_open":49,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":49},"description":"Salary Range:\n€57,900.00 - €107,500.00Job Description Summary\nLocation: Barcelona, Spain; Tel Aviv, Israel#LI-Hybrid\nInternal job title: Assoc. Dir. DDIT ISC Enterprise Security Architecture - Data Security\nThe Enterprise Security Architecture team is looking for a deeply technical security architect who enjoys solving hard engineering problems, influencing enterprise-scale technology decisions, and staying close to implementation.\nOver the next several years, your primary mission will be to lead our Post-Quantum Cryptography (PQC) readiness program and modernize Data Loss Prevention (DLP) capabilities across the enterprise. This is not a governance-only role. We are looking for a hands-on expert who enjoys understanding how technologies work, validating vendor claims, building proof-of-concepts, analyzing architectures, and driving practical outcomes.\nYou will work across infrastructure, cloud, networking, identity, workplace technologies, and applications to help prepare the organization for one of the largest cryptographic transformations in decades while simultaneously improving the effectiveness, precision, and operational efficiency of our data protection capabilities.\nJob Description\nKey responsibilities:\nDevelop and enforce security policies and procedures related Data Security across Novartis businesses to meet business and regulatory requirements\n\nDesign security measures and overall Data Security architecture for the IT landscape in line with the ISC policy framework\n\nTechnical lead for PQC readiness program\n\nSupport and continually review technology standards and controls related to Data Security and recommend information technology strategies, policies, and procedures\n\nIdentify design problems within the Data Security domain\n\nSupport projects to evolve Data Security solutions from evaluation to implementation and assist the delivery of the operational model\n\nSupport the auditing of security policies and procedures\n\nManagement communication with key stakeholders and provide reports to management\n\nProvide ongoing support to maintain the Data Security domain’s effectiveness and efficiency by defining, delivering, and supporting strategic plans for implementing information technologies\n\nDevelop and maintain relationships with key stakeholders and vendors\n\nSupport the direction of technological research by learning the organizational goals, strategies and business drivers\n\nDevelop and maintain architecture diagrams and documentation related to Data Security processes and procedures\n\nBreak down the strategic objectives to requirements on the solution portfolio and target architecture\n\nKey contributor on products, services and/or infrastructure strategies that require complex or advanced conceptualization\n\nResearch and evaluate new Data Security technologies and make strategic security technology choices, directly supervising the quality of designs and implementation inside and between components\n\nWork with improvements, by participation in the development, of the architectural principles, processes, and standards\n\nEssential Requirements:\nUniversity working and thinking level, degree in business/technical area or comparable education/experience\n\n15+ years of working experience in Security domain; minimum 5 years in architecture capacity;\n\n5+ years of experience of working in or providing IT services to a large enterprise like Novartis.\n\nExceptional understanding security domains like Digital Workspace, Data Protection, AI Security as well as good knowledge of Network Security, Identity and Access Management, SIEM, Vulnerability Management\n\nStrong understanding of core cryptography concepts (encryption, key exchange, hashing, digital signatures):\nSolid PKI expertise, including certificate lifecycle management, trust models, and enterprise PKI architectures.\n\nClear understanding of Post-Quantum Cryptography (PQC) concepts, quantum risks to current algorithms, and crypto-agility principles.\n\nAbility to assess quantum-vulnerable cryptographic usage and data protection controls.\n\nExperience designing data encryption architectures for data at rest and in transit.\n\nKnowledge of key management and HSM/KMS solutions.\n\nFamiliarity with cryptographic standards and regulatory requirements (e.g., NIST).\n\nExceptional understanding and knowledge of general IT infrastructure technology, systems and management processes, and experience of sourcing complex IT services, working closely with vendors and making full use of their capabilities\n\nGood knowledge of IT Project Management: Proven experience to initiate and manage projects that will affect other divisions, departments and functions, as well as the corporate environment.\n\nExperience with compliance requirements (e.g. SOX, GxQ / CSV, E-compliance, Records Management, Privacy), and knowledge of (information) risk management related standards or frameworks such as COSO, ISO 2700x, CobiT, ISO 24762, BS 25999, NIST, ISF Standard of Good Practice and ITIL\n\nStrong leadership experience, with excellent written and verbal communication and presentation skills at all levels of the organisation and experience in reporting to and communicating with senior level management (with and without IT background, with and without in-depth risk management background) on information risk topics; interpersonal and collaborative skills, as well as good mediation and facilitation skills\n\nDesirable\nGood understanding and experience with Enterprise Architecture Frameworks like TOGAF will be an added advantage.\n\nCommitment to Diversity & Inclusion:\nWe are committed to building an outstanding, inclusive work environment and diverse teams representative of the patients and communities we serve.\nWhy Novartis?\nOur purpose is to reimagine medicine to improve and extend people’s lives and our vision is to become the most valued and trusted medicines company in the world. How can we achieve this? With our people. It is our associates that drive us each day to reach our ambitions. Be a part of this mission and join us! Learn more here: https://www.novartis.com/about/strategy/people-and-culture\nJoin our Novartis Network: If this role is not suitable to your experience or career goals but you wish to stay connected to learn more about Novartis and our career opportunities, join the Novartis Network here: https://talentnetwork.novartis.com/network\nAccessibility and accommodation:\nNovartis is committed to working with and providing reasonable accommodation to all individuals. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the recruitment process, or in order to receive more detailed information about the essential functions of a position, please send an e-mail to and let us know the nature of your request and your contact information. Please include the job requisition number in your message.\nSkills Desired\nBusiness Architecture, Business Value Creation, Change Management, Consulting, Decision Making, Digital Capabilities, Effective use of Technology (Inactive), Enterprise Architecture (EA), Influencing Skills, IT Governance, Organization Awareness (Inactive), Solution Architecture, Stakeholder Management","description_format":"text","description_chars":7198,"description_truncated":false,"requirements":{"experience_years_min":15,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Spain","iso":"ES","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Oncology Therapeutics","Neurology & CNS Therapeutics","Immunology & Inflammation Therapeutics","Cardiometabolic Therapeutics"],"lifecycle":[{"event":"open","at":"2026-10-20T11:58:08Z"}],"visa":[],"liveness":{"score":19,"band":"cold","label":"Long shot","p_open":1,"p_active":0.54,"p_room":0.36,"age_days":49,"expected_fill_days":29,"reasons":["conf:16","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-26T05:57:25Z"},"pay":{"stated_usd_annual":120563,"is_top_pay":false},"html_url":"https://alion.io/job/novartis-enterprise-security-architect-data-security-2","json_url":"https://alion.io/job/novartis-enterprise-security-architect-data-security-2.json","meta":{"generated_at":"2026-10-26T09:12:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12317,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5824},"rest":"https://alion.io/mcp/rest/get_company?id=5824"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnovartis-enterprise-security-architect-data-security-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnovartis-enterprise-security-architect-data-security-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnovartis-enterprise-security-architect-data-security-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/novartis-enterprise-security-architect-data-security-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnovartis-enterprise-security-architect-data-security-2"}]}