Band

Level 5

Job Description Summary

Location: Barcelona, Spain #LI-Hybrid 12 days/week in office

Internal job title: Assoc. Dir. DDIT ISC End Points, Servers, Data Protection

This role is based in Barcelona. Novartis is unable to offer relocation support for this role: please only apply if this location is accessible for you.

Job Description

The Security Operations team is looking for an Infrastructure & Endpoint Protection Security Engineer (Associate Director DDIT ISC End Points, Servers, Data Protection) to join us in Barcelona. This role will oversee security operations service line, technology governance and external / internal interfaces in accordance with service operations and management processes.

Key Responsibilities:

Ensure stable, secure, and compliant operations across Endpoint Protection and Data Protection solutions, including deployment, lifecycle management, and continuous improvement
Advocate, implement, and enforce Novartis security standards, policies, procedures across all supported services and technologies.
Manage services in alignment with approved budgets, ensuring cost control and optimization
Foster a culture of high performance, accountability, and innovation within Information Security & Compliance
Manage governance of security exceptions and risk acceptance.
Collaborate with CSOC to support cybersecurity threat monitoring, detection, and response activities using deployed endpoint protection toolsets, and partner with service lines, platform teams, and application owners to coordinate corrective and preventive actions.
Oversee global deployment, health, and compliance of endpoint security agents, driving remediation where gaps are identified.
Lead crisis and incident management activities, engaging internal and external stakeholders as required, own Problem Management, ensuring root cause analysis is completed and preventive measures are implemented to avoid recurrence;
Drive Service Management and BAU operations, including leadership and oversight of external service providers.
Lead the creation, maintenance, and continuous improvement of service documentation, runbooks, and operational procedures; ensure adherence to operational procedures, maintaining system integrity, availability, and security.

Essential Requirements:

5+ years of experience in IT Security Engineering with strong focus on Endpoint Security and Data Protection, and strong background in Security Operations processes, tooling, and service delivery.
Hands-on experience with Endpoint and Data Protection technologies, including: Microsoft Defender for Endpoint, AV, EDR/XDR, Palo Alto Cortex XDR, BeyondTrust Elevated Privlige Management, Zimperium Mobile Threat Defense, Data Loss Prevention (DLP), Information protection solutions
Demonstrated ability to identify, assess, and mitigate security risks, build trust, and maintain credibility with business partners.
Proven stakeholder engagement, presentation, and excellent communication skills across technical and senior leadership levels; effective collaborator with senior management, compliance, architecture, application, infrastructure, and Security Operations teams.
Clear, structured thinker able to navigate ambiguity, align security solutions to business needs, and drive outcomes.
Thrives in a fast‑paced, technology‑driven environment, proactively advancing security capabilities, ability to consistently delivers against commitments, deadlines, and competing priorities.

Desirable requirements:

Working knowledge of scripting and automation (e.g., PowerShell, Python) to support operational efficiency and automation initiatives.

Commitment to Diversity & Inclusion:

We are committed to building an outstanding, inclusive work environment and diverse teams representative of the patients and communities we serve.

Why Novartis?
Our purpose is to reimagine medicine to improve and extend people’s lives and our vision is to become the most valued and trusted medicines company in the world. How can we achieve this? With our people. It is our associates that drive us each day to reach our ambitions. Be a part of this mission and join us! Learn more here: https://www.novartis.com/about/strategy/people-and-culture

Join our Novartis Network: If this role is not suitable to your experience or career goals but you wish to stay connected to learn more about Novartis and our career opportunities, join the Novartis Network here: https://talentnetwork.novartis.com/network

Accessibility and accommodation:
Novartis is committed to working with and providing reasonable accommodation to all individuals. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the recruitment process, or in order to receive more detailed information about the essential functions of a position, please send an e-mail to and let us know the nature of your request and your contact information. Please include the job requisition number in your message.

Skills Desired

Business Acumen, Change Management, Escalation, Information Security Audit, Information Security Risk Management, Operational Excellence Projects, Quality Management, Root Cause Analysis (RCA), Secops (Security Operations), Vendor Management