Novartis

Actively Hiring

Information Security Governance Specialist

Prague, Czech Republic

Full time

Role Overview

Supports the implementation of the information security governance and strategy per the information management framework through business partnering.

About Novartis

Novartis is reimagining medicine to improve and extend people's lives. We deliver high-value medicines that alleviate disease, ease suffering and improve quality of life.

Key Responsibilities

HYRX

A community-driven job board helping engineers discover high-impact roles at companies building the future.

Explore

All Opportunities
100% Remote Roles
Post Opp. (Job)
Post Interview Exp.
Read Interview Exp.

Built for the developer community.

Provide ISC governance/risk advice and support for Operations IT and OT Function and oversee a specific governance/risk area globally.

Ensure monitoring of information risk and proactive mitigation of issues.

Deliver global information governance programs like risk management, data classification, storage and transmission guidelines, audit readiness support, etc.

Maintain strong knowledge of internal controls and internal risk and control frameworks/standards or the Information Management Policy Framework.

Provide KPI reporting, dashboards, and continuous improvements to ensure compliance.

Analyse impact of new technologies and regulatory changes on information security considering Cyber Security and Data Privacy Acts, Laws, and Regulations.

Leverage AI and automation to streamline compliance activities, including risk assessments, control documentation, testing, issue management, and audit support.

Requirements & Eligibility

Over 8-10 years of experience in Business Information Security and Compliance, IT Risk management, Audit management, Information Governance and Management
Experience with Good Practice Quality guidelines and regulations (GxP)
Experience with OT security compliance and implementing policies in manufacturing setup
University degree in business/technical/scientific area or comparable education/experience
Professional Information Security certifications (preferred), either from ISACA like CISM, CRISC, CISA and/or ISC2 like CISSP, CCSP, etc.
Experience in stakeholder management (Senior Business Execs, IT Site Heads, etc.)

Required Skills & Tech

Audits ComplianceBusiness AcumenCommunicationCompliance ManagementCompliance Risk ManagementCompliance TrainingInfluencing SkillsOperational ExcellenceQuality Assurance

Ready to apply?

Take the next step and submit your application.

Role Highlights

Posted Date

14 Oct 2026

Salary

948,290.00 - 1,761,110.00 CZK

Experience

8-10 years