Job Description

Summary -Focused management of security operations and or technology governance and external / internal interfaces in accordance with service operations and management processesMajor accountabilities:

• Experience in SOX compliance guidelines and interpretations and fully familiar with PCAOB requirements for IAM team. Identify key controls and develop work programs for testing of these key controls.
• Perform and documents SOX walkthroughs and testing in accordance with the Companys frameworks
• Assist with the maintenance of consistency and quality in SOX compliance work across the IAM.
• Oversees identity governance and access services offered to customers inside and outside of Novartis global IT Infrastructure.

• Oversees processes and resources delivering identity governance and access services, ensuring the coordination of these teams in overall planning activities, service delivery, and issue resolution.
• Knowledge of prior experience working with or within the business on risk/controls, audit/compliance or business/product teams * Manage and run effective governance forums including the IAM control forum in line with IAM and CSO governance framework ensuring effective oversight of the embedment of standard and oversight of the control environment.
• Monitoring of the control health via Key Risk and Control indicators
• Experience with regulatory frameworks, such as SOX, GxP, or similar.

• Performs service reviews, qualifications and self assessments to e.g. ensure conformance with service-, quality-, audit, compliance, security and SOX requirements and industry best practices (Inhouse Operations, Third Party Suppliers and external Service Providers).
• Assists with the planning, (with Architecture, and Governance) to establish the overall IAM controls and inline the services delivery roadmaps.
• Ability to get involved with engineering and/or development activities to ensure it is within the IAM Standards and framework, if not then gap analysis on the right fitment of the products.

Work Experience:

• University working and thinking level, degree in computer science or comparable education / experience with10 (or more) years of IT experience
• Solid understanding of Identity and Access Management concepts.
• Minimum 10 years of relevant IAM Security governance experience
• Good understanding of IAM (SSO, IGA , PKI ) domains.
• Currently working on the IAM Governance or audits of the IAM internal and external audit experience
• Expertise in User Lifecycle Management, Access Certifications, Access Request, Workflow, and Delegated Administration.
• 5+ years experience with SOX controls and enterprise governance, enterprise compliance, SSO authentication and authorization with Microsoft Azure, Cyberark
• Basic/Overview Operations experience with Oracle Access Manager (OAM), Oracle Unified Directory (OUD) and Oracle Identity Manager (OIM). Developer/coding experience in Oracle Identity manager will be preferred. Onboarding of applications on OAM, OUD and OIM IAM tools.
• Other knowledge like Active Directory, Azure MFA or Cyberark is added advantage.

Why Novartis? Our purpose is to reimagine medicine to improve and extend peoples lives and our vision is to become the most valued and trusted medicines company in the world. How can we achieve this? With our people. It is our associates that drive us each day to reach our ambitions. Be a part of this mission and join us! Learn more here: https://www.novartis.com/about/strategy/people-and-cultureYoull receive: You can find everything you need to know about our benefits and rewards in the Novartis Life Handbook. https://www.novartis.com/careers/benefits-rewardsCommitment to Diversity and Inclusion: Novartis is committed to building an outstanding, inclusive work environment and diverse teams' representative of the patients and communities we serve.Join our Novartis Network: If this role is not suitable to your experience or career goals but you wish to stay connected to hear more about Novartis and our career opportunities, join the Novartis Network here: https://talentnetwork.novartis.com/networkSkills Desired Information Security Risk Management, ITIL, Quality Management, Root Cause Analysis (RCA), Sec Ops (Security Operations), Vendor Management

Novartis