Secops & Vulnerability Services Associate Director

387625BR

**SecOps & Vulnerability Services Associate Director - Americas**:
Mexico

**About the role**

Location: Mexico City - Hybrid work.
We are seeking an SecOps & Vulnerability Services Associate Director - Americas to reduce risk exposure from security vulnerabilities with major focus on high risk and 0-day vulnerabilities emergency response and remediation.
This role will work directly with DDIT and ISC team and reports to the Dir. DDIT ISC SecOps VulnSvcs.

**Responsibilities**:

- Act as a Technical Security SME and point of contact for responding to ongoing high-risk vulnerability exposure:

- Monitoring and prioritizing security vulnerabilities through risk analysis to understand potential impact and translate vulnerability severity as security risk.
- Identifying potential improvement areas for vulnerability response and shared learned lessons with teams and stakeholders.
- Taking accountability to ensure adherence with Security and Compliance policies and procedures.
- Staying up to date with the latest security threats and vulnerabilities, proactively recommending mitigation strategies. And develop and maintain documentation of related process and best practices.
- Implementing security policies, procedures, and standards to ensure the confidentiality, integrity, and availability of cloud resources from technical vulnerabilities.
- Providing security awareness and training to teams on security practices and vulnerability related processes.

**Commitment to Diversity & Inclusion**:

- We are committed to building an outstanding, inclusive work environment and diverse teams representative of the patients and communities we serve._

**Role Requirements**
- University or master level degree in business/technical/scientific area or comparable education/experience
- 8+ years of overall working experience in information security preferably in Application Security and Vulnerability management domain.
- At least 3+ years in handling security vulnerability response and remediation or SOC, coordinating with relevant stakeholders, and implementing corrective actions.
- Strong security knowledge top security vulnerabilities, leading vulnerability scoring standards, such as CVSS, and ability to translate vulnerability severity as security risk.
- Hands-on experience monitoring threat intel for high-risk vulnerabilities, finding ownerships, handling shadow IT asset scenarios, sensitizing teams for security remediation, performing quick tests for technical vulnerability confirmation, etc.
- Demonstrated leadership skills through experience in middle management and/or engagement with large security/development program stakeholders.
- Communication and collaboration: Persuasive communication skills to effectively convey security risks and vulnerabilities to both technical and non-technical stakeholders, and the ability to collaborate with cross-functional teams.
- Strong problem-solving skills and the ability to work independently.
- Continuous learning: A commitment to staying up to date with the latest security updates, vulnerability disclosures, and industry best practices.
- Knowledge of secure system development, AppSec and project/program management
- Strong understanding of metrics, KPI/KRI, SLAs, and dashboards for vulnerability management and providing executive reporting.

Why Novartis?

766 million lives were touched by Novartis medicines in 2021, and while we’re proud of this, we know there is so much more we could do to help improve and extend people’s lives.

We believe new insights, perspectives and ground-breaking solutions can be found at the intersection of medical science and digital innovation. That a diverse, equitable and inclusive environment inspires new ways of working.

We believe our potential can thrive and grow in an unbossed culture underpinned by integrity, curiosity, and flexibility. And we can reinvent what's possible when we collaborate with courage to aggressively and ambitiously tackle the world’s toughest medical challenges. Because the greatest risk in life is the risk of never trying

Imagine what you could do here at Novartis

**Division**

Operations

**Business Unit**

DATA, DIGITAL & IT

**Work Location**

Ciudad de México

**Company/Legal Entity**

NOV CORPORATIVO MEX

**Functional Area**

Technology Transformation

**Job Type**

Full Time

**Employment Type**

Regular

**Shift Work**

No

**Early Talent**

No