Associate Director overseeing Network Security Governance at Novartis in Prague or Hyderabad. Driving cyber maturity, risk management, and governance frameworks for secure network environments.
Responsibilities
Define and enforce security governance frameworks for OT environments, ensuring alignment with IT security standards; oversee segmentation and access control for industrial networks and critical infrastructure; Collaborate with OT teams to integrate cybersecurity best practices into operational processes.
Establish governance for continuous vulnerability scanning and assessment across network and OT systems.
Develop and maintain baseline security configurations for all devices; monitor compliance with hardening standards and enforce configuration drift controls; implement governance for secure configuration change management across hybrid environment.
Define and maintain network security governance frameworks, policies, and standards; oversee policy reviews and exception management, ensuring timely approvals and compliance; align governance practices with regulatory requirements and internal audit standards.
Collaborate with Enterprise Security Architecture to ensure network segmentation and macro/micro security controls (e.g., NS-14 and NS-15 IMF enforcement); drive adoption of zero-trust principles and advanced segmentation strategies across hybrid environments.
Provide governance for core network security services (firewalls, VPN, SD-WAN, cloud connectivity); ensure service delivery processes adhere to governance standards and segregation of duties; oversee change risk mitigation protocols for high-risk network changes.
Lead cyber-maturity assessments for network security domains; Monitor compliance with internal and external audit requirements; Identify and mitigate risks related to vendor dependencies and operational gaps.
Act as a key interface between Security Operations, IT Infrastructure, and Cloud Services; Partner with business units and project teams to embed security governance in transformation initiatives; Support M&A onboarding and connectivity governance for new entities.
Requirements
5+ years of experience in network security design and governance models as well as OT security governance
Strong knowledge of firewall technologies, network cloud security, and segmentation strategies.
Leadership in policy development, compliance, and risk management.
Ability to manage cross-functional teams and influence senior stakeholders.
Familiarity with audit frameworks and regulatory standards.
Strong knowledge of firewalls, IDS/IPS, VPNs, segmentation, and zero-trust models.
Ability to lead detection, analysis, and response to network threats.
Familiarity with securing multi-cloud environments and SD-WAN.
Deep understanding of cryptographic protocols and secure key management.
Using metrics and dashboards to monitor network health and compliance.
Root cause analysis and post-mortem reviews for continuous improvement.
Understanding how automation and AI can enhance threat detection.
Benefits
Monthly pension contribution matching your individual contribution up to 3% of your gross monthly base salary
Risk Life Insurance (full cost covered by Novartis)
5-week holiday per year; (1 week above the Labour Law requirement)
4 paid sick days within one calendar year in case of absence due to sickness without a medical sickness report
Cafeteria employee benefit program – choice of benefits from Benefit Plus Cafeteria in the amount of 12,500 CZK per year
Meal vouchers in amount of 105 CZK for each working day (full tax covered by company)
OT Cybersecurity Engineer deploying and managing security solutions for operational technology environments at Solventum. Collaborates with teams to improve security posture and provide user support.
Principal Cybersecurity role at AT&T focusing on cloud security feature design and implementation. Leading innovative security solutions in conjunction with modern cloud technologies and Agile methodologies.
Cloud Security Vulnerability Management Program Specialist ensuring secure configurations of cloud workloads. Focused on vulnerability management, monitoring, and risk remediation across environments at Bank of America.
Security Architect delivering secure solutions for Defence and National Security at SiXworks. Supporting agile teams in technical projects like Kubernetes and security risk management.
CIS Security Manager responsible for EID’s information security strategy and compliance. Ensuring protection of information assets and promoting security culture across the organization.
Cyber Security Subject Matter Expert at CACI supporting a new DoD contract. Working on cloud security with an emphasis on system security engineering and risk management.
Cybersecurity Engineer developing solutions for complex security challenges protecting data and networks. Implementing next generation security solutions for government and commercial clients in hands - on roles.
Information Security Manager responsible for security governance and risk management. Engaging with technical teams for compliance with security standards and best practices.
Security Access Control Specialist at AMERICAN SYSTEMS managing database queries, document processes, and security measures. Supporting federal government programs through effective security operations in McLean, VA.