**Summary**:
**About the Role**:
**Your responsibilities include, but are not limited to**:
- Develop, implement, and maintain information security policies, procedures, and guidelines to ensure compliance with industry standards and regulatory requirements.
- Conduct regular security assessments, audits, and risk analyses to identify vulnerabilities and ensure the effectiveness of security controls.
- Collaborate with various departments to ensure that information security requirements are integrated into business processes and projects.
- Provide expert guidance on information security best practices and emerging threats to senior management and other stakeholders.
- Lead incident response efforts and coordinate with internal and external teams to address security breaches and mitigate risks.
- Develop and deliver information security training and awareness programs to employees at all levels.
- Conduct regular Risk Committee Meetings and drive accountability & remediations.
- Conduct Annual Risk Identification Workshops to identify Risks, assign ownership and gain agreements on Remediation Plans and target dates.
- Stay up-to-date with the latest developments in information security, HIPAA, GDPR, and GxP regulatory requirements to ensure the organization remains compliant and secure.
**Role Requirements**:
- Bachelor's or Master's degree in Computer Science, Information Technology,



or a related field.
- ******* years of experience in information security, with a focus on compliance, risk management, HIPAA, GDPR, and GxP.
- Data Analytics & Artificial Intelligence expertise
- Minimum of one certification among CISSP, CISA, CISM, CCSP.
- Strong knowledge of information security frameworks, standards, and regulations (e.g., ISO *****, NIST, GDPR, HIPAA).
- Excellent analytical, problem-solving, and decision-making skills.
- Strong communication and interpersonal skills, with the ability to effectively convey complex security concepts to non-technical stakeholders.
- Proven ability to work independently and as part of a team in a fast-paced, dynamic environment.
**Preferred Skills**:
- Experience with security tools and technologies such as MS Azure, AWS, Data bricks, Data Analytics, and vulnerability management.
- Knowledge of cloud security principles and best practices.
- Experience in conducting security assessments and audits.
- Familiarity with data privacy regulations and requirements.
Division
Operations
Business Unit
CTS
Location
Mexico
Site
INSURGENTES
Company / Legal Entity
MX06 (FCRS = MX006) Novartis Farmacéutica S.A. de C.V.
Functional Area
Technology Transformation
Job Type
Full time
Employment Type
Regular
Shift Work
No

📌 Assoc. Dir. Business Information Security Expert Ddit Isc Us&I (Xico)
🏢 Novartis
📍 Xico