Job Description

The Senior Specialist – Control Assessments is responsible for performing independent project and technology control assessments, identifying control gaps and technology risks, evaluating compliance with internal policies and industry standards, and supporting remediation activities to strengthen the organization's overall risk and control environment. The role supports the delivery of IT Compliance and Control Assessment services across applications, platforms, cloud environments, infrastructure, digital solutions, and emerging technologies

#Hybrid

Key Responsibilities :

• Perform risk-based Control Assessments and support the delivery of IT Compliance and Risk Assurance services.

• Evaluate control design and operating effectiveness against applicable policies, standards, and control requirements.

• Identify control gaps, compliance deficiencies, and potential technology risks.

• Recommend practical and risk-based remediation actions to address identified issues.

• Align findings, recommendations, and remediation plans with business, security, compliance, and technology stakeholders.

• Track remediation activities through closure and validate evidence supporting issue resolution.

• Support continuous improvement initiatives, automation opportunities, and control monitoring activities.

• Contribute to awareness sessions, training programs, and enhancement of assessment methodologies and guidance materials.

• Ensure adherence to Information Security, Risk, Compliance, and Governance policies and procedures within the scope of assigned responsibilities.

Essential Requirement -

• Bachelor's degree in Computer Science, Information Systems, Engineering, Cybersecurity, Accounting, or a related discipline.

• 5–7 years of experience in IT Audit, IT Risk Management, IT Compliance, Information Security, Internal Controls, or related fields.

• Strong hands-on experience in IT control testing, risk assessments, compliance reviews, or security assessments.

• Experience with SOX compliance and IT General Controls (ITGCs).

• Strong understanding of risk management principles, internal control frameworks, and cybersecurity concepts.

• Excellent analytical, stakeholder management, communication, and report-writing skills.

• Experience with SOX, SOC1, SOC2, NIST, ISO 27001, COBIT, PCI DSS, GxP, or similar compliance frameworks.

Desirable Requirement -

• Big 4 consulting experience.8–10 years of experience within large corporate environments..

• Professional certifications such as CISA, CISM, CRISC, CISSP, or equivalent.

Commitment to Diversity & Inclusion

We are committed to building an outstanding, inclusive work environment and diverse teams representative of the patients and communities we serve.

Accessibility and accommodation

Novartis is committed to working with and providing reasonable accommodation to individuals with disabilities. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the recruitment process, or in order to perform the essential functions of a position, please send an e-mail to diversityandincl.india@novartis.com and let us know the nature of your request and your contact information. Please include the job requisition number in your message.

Skills Desired

Business Acumen, Influencing Skills, Information Security Risk Management, IT Governance, Stakeholder Management