Head DDIT ISC Software Development Governance, Integrity & Secure Software Development Life Cycle (SDLC)
Job Fit Check
Base Career helps you apply smarter for this job.
Key skills for this role
Key Skills for This Role
Full Job Posting
Key Responsibilities
- Own the enterprise policy, standards and controls for software engineering, including source control, branching, peer review, testing, release management, environment segregation, change control, configuration and release documentation.
- Rationalise overlapping GxP, SOX, privacy, security and IT-quality requirements into one coherent, risk-based framework, ensuring low-risk internal tools are not governed like regulated clinical systems.
- Retire SDLC controls that do not reduce risk and ensure tooling is implemented to securely speed up software development at Novartis at the highest scale, leveraging and creating AI tooling for the enterprise.
- Implement policy as code and controls as code, including branch protections, mandatory review, signed commits, segregation of duties, deployment approvals and immutable audit trails.
- Build automated, continuous evidence pipelines and define control telemetry including coverage, exceptions, drift, mean time to remediate and control effectiveness, with a focus on agility, automation and speed.
- Own secure-by-default guardrails in golden pipelines and paved-road platforms, aligning with recognized frameworks including NIST SSDF, ISO/IEC 27001 and IEC 62304 where applicable.
- Define controls for AI-assisted engineering, including acceptable use of coding assistants, agentic tooling, IP and licence exposure, provenance, attribution and human accountability for review and approval.
- Define controls for AI-containing products, including model lifecycle, dataset and model documentation, evaluation, drift monitoring, explainability, human oversight and readiness for evolving regulatory requirements.
- Use AI to reduce compliance burden through automated risk assessment drafting, control mapping, test generation, deviation triage and documentation synthesis, while serving as technical authority for inspections, audits, certifications and SDLC remediation.
- Lead a federated community of engineering, quality, security and compliance practitioners, publish practical guidance, advise senior leaders on risk and trade-offs, and partner with software developers across the enterprise to enable efficient delivery of compliant and secure products.
Essential Requirement
- You are a practitioner. You have substantial hands-on software engineering experience: you have written production code, owned CI/CD pipelines, and can read and modify pipeline configuration, IaC and policy code today, unaided. Expect a technical assessment.
- 10+ years in software engineering, platform engineering, DevSecOps or engineering quality, including senior technical ownership of delivery pipelines at scale.
- Experience designing and operating automated controls in regulated environments — with evidence of replacing manual compliance work with software.
- Working fluency in regulated-software requirements relevant to pharma/life sciences: GxP, GAMP 5 (2nd Ed.), CSA, 21 CFR Part 11, EU Annex 11 and data integrity/ALCOA+.
- Security engineering depth: application security, software supply chain security, secrets and identity management, vulnerability management.
- Credible technical judgement on AI in the SDLC — both the tooling and its governance implications.
- Ability to influence without authority across engineering, quality and business lines, and hold positions with senior stakeholders and auditors.
- Excellent written English.
Desirable Requirement
- Experience in pharma, biotech, medical devices or another regulated industry (finance, aviation, nuclear), with real inspection or audit exposure.Experience with SOX ITGC in engineering contexts, IEC 62304 / SaMD, and privacy-by-design under GDPR.
- Hands-on with modern stacks: Git-based platforms and policy/protection features, container orchestration, cloud, IaC, policy engines (e.g. OPA/Rego or equivalent), test automation frameworks, SBOM and signing tooling.
- You’ll receive: You can find everything you need to know about our benefits and rewards in the Novartis Life Handbook. https://www.novartis.com/careers/benefits-rewards
- Commitment to Diversity and Inclusion: Novartis is committed to building an outstanding, inclusive work environment and diverse teams' representative of the patients and communities we serve.
- Join our Novartis Network : If this role is not suitable to your experience or career goals but you wish to stay connected to hear more about Novartis and our career opportunities, join the Novartis Network here: https://talentnetwork.novartis.com/network
About Novartis
Multinational pharmaceutical company researching and manufacturing innovative medicines.
Visit company websiteJobs and hiring trendsApply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Novartis
Medical Science Liaison, Breast Cancer - Western Canada
, CAN
Job Description Summary Job Description Key responsibilities Build and maintain strong scientific relationships with targeted external experts, ensuring engagement is credible, compliant, and aligned with territory needs
Associate Director, Data Reporting Analyst
, USA
Job Description Summary Job Description Key Responsibilities Design and maintain reporting solutions for data quality, governance, compliance, and operational performance. Create executive-ready dashboards, scorecards, a
Job Posting Title Dermatology Territory Account Specialist – East Bay, CA
, USA
Job Description Summary Job Description Key Responsibilities: Navigate and resolve challenges within accounts to ensure customer needs are met with effective, tailored solutions. Build a strategic territory plan by align
Manager, Corporate Communications
Toronto, CAN
Job Description Summary Job Description Key Responsibilities Develop and deliver engaging internal communications that connect associates to business priorities and culture. Partner with leaders and stakeholders to creat
Area Manager, Oncology
, KSA
Job Description Summary Job Description Major accountabilities: Accountable for delivering the area’s sales, market share, performance and profitability to meet or exceed budget targets Defines, develops and oversees sho
Global Medical Affairs Director, Oncology
London, GBR
Salary Range: Job Description Summary Job Description Responsibilities: Lead the development and execution of global medical affairs strategies across the Solid Tumors portfolio. Shape integrated evidence generation plan
Clinical Research Medical Advisor
Mumbai, IND
Job Description Summary Job Description Major Accountabilities: Assess Clinical Trial Feasibility by validating study designs and making final decisions on protocol feasibility based on medical practice, patient availabi
Director, Analytics Engineering (2 Openings)
, USA
Job Description Summary Job Description Major accountabilities: Design and implement intelligent, self-healing data pipelines that leverage AI/ML for automated data quality monitoring, anomaly detection, and remediation.
Medical Science Liaison, Breast Cancer - Western Canada
, CAN
Associate Director, Data Reporting Analyst
, USA
Job Posting Title Dermatology Territory Account Specialist – East Bay, CA
, USA
Manager, Corporate Communications
Toronto, CAN
Area Manager, Oncology
, KSA
Global Medical Affairs Director, Oncology
London, GBR
Clinical Research Medical Advisor
Mumbai, IND
Director, Analytics Engineering (2 Openings)
, USA