Novartis is unable to offer relocation support for this role: please only apply if this location is accessible for you.

About the Role
Mergers and acquisitions create some of the most complex and interesting challenges in Information Security. As a Business Information Security Expert (BISE) supporting FM&A;, you will operate at the intersection of Information Security, Cybersecurity, Technology, Finance and FM&A; execution. Acting as a trusted security adviser and business partner, you will support the organization's understanding of cyber risk, enabling transactions to proceed securely, intelligently and at business speed.
You will provide Information Security expertise across the FM&A; lifecycle, from due diligence and pre-close risk assessments that feed ECN decision making, through Day 1 readiness, integration and post-close remediation as well as supporting divestitures or other transaction types where required.
You will need to be pragmatic and determine what genuinely matters, translate technical findings into business risk and help identify practical ways forward, often when information is incomplete and decisions need to be made quickly.
FM&A; Information Security Due Diligence: Assess acquisition targets, rapidly understand unfamiliar technology and security environments, and identify risks that could materially affect the transaction, integration strategy or post-close risk profile.
Risk Analysis & Decision Support: Distinguish material risks from lower-priority technical findings and translate complex issues into clear business impact, options and recommendations.
Transaction Security Strategy: Define proportionate security priorities, mitigations and escalation requirements,



balancing security objectives with transaction timelines and business realities.
Business Partnership: Work closely with Leadership and Technical Experts in FM&A;, Information Security, Technology, Finance, Legal, Privacy, Risk and Compliance to develop practical solutions to complex transaction challenges.
Essential

Requirements:
8+ years of experience with strong understanding and knowledge of enterprise Information Security and Cybersecurity, with experience in compliance, governance and controls aspects.
Ability to assess risk across applications, infrastructure, cloud, identity, data, AI tools and third parties.
Ability to rapidly understand unfamiliar technologies, companies and business environments, and judgement to distinguish material risk from technical noise.
Experience in M&A; transactions, cyber due diligence, technology integration, third-party risk, pharmaceuticals/life sciences or another regulated industryCommitment to Diversity & Inclusion:We are committed to building an outstanding, inclusive work environment and diverse teams representative of the patients and communities we serve.
Our purpose is to reimagine medicine to improve and extend people's lives and our vision is to become the most valued and trusted medicines company in the world. Learn more here: our Novartis Network: If this role is not suitable to your experience or career goals but you wish to stay connected to learn more about Novartis and our career opportunities, join the Novartis Network here: and accommodation:Novartis is committed to working with and providing reasonable accommodation to all individuals. Read our handbook (PDF 30 MB)DivisionOperationsBusiness UnitInformation TechnologyLocationMexicoSiteINSURGENTESCompany / Legal EntityMX06 (FCRS = MX006) Novartis Farmacéutica S.
A.

📌 Business Information Security Expert, Financial (México)
🏢 Novartis
📍 México