Sr. Spec. DDIT ISC Gov Proj. Control Assessments

Job Description Summary The Senior Specialist – Control Assessments is responsible for performing independent project and technology control assessments, identifying control gaps and technology risks, evaluating compliance with internal policies and industry standards, and supporting remediation activities to strengthen the organization's overall risk and control environment. The role supports the delivery of IT Compliance and Control Assessment services across applications, platforms, cloud environments, infrastructure, digital solutions, and emerging technologies Job Description #Hybrid Key Responsibilities : Perform risk-based Control Assessments and support the delivery of IT Compliance and Risk Assurance services. Evaluate control design and operating effectiveness against applicable policies, standards, and control requirements. Identify control gaps, compliance deficiencies, and potential technology risks. Recommend practical and risk-based remediation actions to address identified issues. Align findings, recommendations, and remediation plans with business, security, compliance, and technology stakeholders. Track remediation activities through closure and validate evidence supporting issue resolution. Support continuous improvement initiatives, automation opportunities, and control monitoring activities. Contribute to awareness sessions, training programs, and enhancement of assessment methodologies and guidance materials. Ensure adherence to Information Security, Risk, Compliance, and Governance policies and procedures within the scope of assigned responsibilities. Essential Requirement - Bachelor's degree in Computer Science, Information Systems, Engineering, Cybersecurity, Accounting, or a related discipline. 5–7 years of experience in IT Audit, IT Risk Management, IT Compliance, Information Security, Internal Controls, or related fields. Strong hands-on experience in IT control testing, risk assessments, compliance reviews, or security assessments. Experience with SOX compliance and IT General Controls (ITGCs). Strong understanding of risk management principles, internal control frameworks, and cybersecurity concepts. Excellent analytical, stakeholder management, communication, and report-writing skills. Experience with SOX, SOC1, SOC2, NIST, ISO 27001, COBIT, PCI DSS, GxP, or similar compliance frameworks. Desirable Requirement - Big 4 consulting experience.8–10 years of experience within large corporate environments.. Professional certifications such as CISA, CISM, CRISC, CISSP, or equivalent. Commitment to Diversity & Inclusion We are committed to building an outstanding, inclusive work environment and diverse teams representative of the patients and communities we serve. Accessibility and accommodation Novartis is committed to working with and providing reasonable accommodation to individuals with disabilities. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the recruitment process, or in order to perform the essential functions of a position, please send an e-mail to diversityandincl.india@novartis.com and let us know the nature of your request and your contact information. Please include the job requisition number in your message. Skills Desired Business Acumen, Influencing Skills, Information Security Risk Management, IT Governance, Stakeholder Management Improving the lives of people living with disease takes more than innovative science. It takes a focus on the needs of people and a community committed to meeting them. It takes a team of people like you. Working together. Learning together. Thriving together. Discover how you can join us in changing people’s lives. Novartis is aware of employment scams which make false use of our company name or leader’s names or recruiter’s names to defraud job seekers. Novartis does not make job offers without interview and never asks candidates for money. If you have encountered a job posting or been approached with a job offer that you suspect may be fraudulent, we strongly recommend you do not respond, send money or personal information. Novartis is not responsible for any claims, losses, damages, or expenses resulting from scams. In the context of China Cross-Border Data Transfer (CBDT) policy, if you need to apply for a position in China, please go to the local Recruiting System TaleNov .