Enterprise Security Architect – Data Security
Our Take
Design and implement data security architecture for Novartis's Digital Workspace.
What you’ll do
- Develop and enforce data security policies
- Design data security architecture for IT landscape
- Lead PQC readiness program
- Support and review technology standards
- Identify data security design problems
- Support data security solution evolution
- Communicate with key stakeholders
- Research new data security technologies
What they’re looking for
- 15+ years in security, 5+ in architecture
- 5+ years in large enterprise IT services
- Expertise in Data Protection, AI Security
- Strong PKI and cryptography knowledge
- Understanding of Post-Quantum Cryptography
- Experience with encryption architectures
- Familiarity with IT Project Management
- Knowledge of risk management frameworks
Skills & Focus Areas
- Data Security
- Enterprise Architecture
- PKI
- Cryptography
- Risk Management
- IT Project Management
- NIST
- ISO 27001
As posted by Novartis AG
Location: Barcelona, Spain; Tel Aviv, Israel #LI-Hybrid Internal job title: Assoc. Dir. DDIT ISC Enterprise Security Architecture – Data Security The Enterprise Security Architecture team is looking for a deeply technical security architect who enjoys solving hard engineering problems, influencing enterprise-scale technology decisions, and staying close to implementation.Over the next several years, your primary mission will be to lead our Post-Quantum Cryptography (PQC) readiness program and modernize Data Loss Prevention (DLP) capabilities across the enterprise. This is not a governance-only role. We are looking for a hands-on expert who enjoys understanding how technologies work, validating vendor claims, building proof-of-concepts, analyzing architectures, and driving practical outcomes.You will work across infrastructure, cloud, networking, identity, workplace technologies, and applications to help prepare the organization for one of the largest cryptographic transformations in decades while simultaneously improving the effectiveness, precision, and operational efficiency of our data protection capabilities.