Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted today

GRC Compliance Senior Analyst

novartis250 open roles

Where
Durham
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowGRC Compliance Senior Analystnovartis · Durham

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on novartis's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

9.8% of postings close within 7 days. Measured by our own scanner across the market. novartis postings stay open a median of 6 days.

Share of postings closed within
  1. 1.9%1 day
  2. 3.9%3 days
  3. 9.8%7 days
  4. 15.6%14 days
  5. 33.8%30 days
This job: posted today

novartis median: 6 days open

The posting

Job Description Summary

Location: Durham,(North Carolina), US #LI-Hybrid 3 days/week in office

Internal job title: Sr. Spec. DDIT ISC Operations

About the Role: The GRC Compliance Senior Analyst and support information security, risk, and compliance activities across business applications, IT/OT services, and manufacturing sites. The role will ensure solutions are designed, developed, and operated in accordance with organizational security standards, regulatory requirements, and governance frameworks. They will drive continuous improvement of security compliance programs, strengthen risk management practices, and maintain audit and inspection readiness.

Job Description

Key Responsibilities:

  • Provide ISC governance/risk advice and support for Operations IT and OT Function and oversee a specific governance/risk area globally. Ensure IT/OT project risks are managed in line with ISC strategy, the policy framework, laws and regulations and industry standards.
  • Ensure monitoring of information risk and proactive mitigation of issues. Continuous support risk-based treatment of threats, issues and vulnerabilities. Guide teams and support them in understanding the risk exposure and technical safeguards.
  • Deliver global information governance programs like risk management, data classification, storage & transmission guidelines, audit readiness support, etc.
  • Maintain strong knowledge of internal controls and internal risk and control frameworks/standards or the Information Management Policy Framework. Systematically support implementation and monitoring of the same.
  • Provide KPI reporting, dashboards, and continuous improvements to ensure compliance.
  • Analyse impact of new technologies and regulatory changes on information security considering Cyber Security and Data Privacy Acts, Laws, and Regulations
  • Ensure good communication and collaboration with the Service Delivery Teams of the DDIT operations and other support partners. Share new ideas, be proactive and have desire to deliver business value.
  • Leverage AI and automation to streamline compliance activities, including risk assessments, control documentation, testing, issue management, and audit support.

Essential Requirements:

  • Over 8+ years of experience in Business Information Security and Compliance, IT Risk management, Audit management, Information Governance and Management, GRC
  • University degree in business/technical/scientific area or comparable education/experience
  • Extensive knowledge and experience to efficiently manage risks, vulnerabilities and Issues within the function.
  • Disciplined approach in managing the functional & operational risks, successful engagement with stakeholders, advocacy to drive Information Security Compliance activities.
  • Demonstrated ability to collaborate effectively and build successful partnerships with key stakeholders, vendors, support teams, and internal cross-functional teams.
  • Experience with Good Practice Quality guidelines and regulations (GxP)
  • Strong stakeholder management skills (Senior Business Execs, IT Site Heads, etc.)
  • Excellent communication skills with proficiency in English (written and spoken)

Desirable requirements:

  • Experience with OT security compliance and implementing policies in manufacturing setup, ideally in pharma
  • AI knowledge and experience
  • A professional Information Security certifications, either from ISACA like CISM, CRISC, CISA and/or ISC2 like CISSP, CCSP, etc.

​ Commitment to Diversity & Inclusion:

We are committed to building an outstanding, inclusive work environment and diverse teams representative of the patients and communities we serve.

Why Novartis? Our purpose is to reimagine medicine to improve and extend people’s lives and our vision is to become the most valued and trusted medicines company in the world. How can we achieve this? With our people. It is our associates that drive us each day to reach our ambitions. Be a part of this mission and join us! Learn more here: https://www.novartis.com/about/strategy/people-and-culture

Join our Novartis Network: If this role is not suitable to your experience or career goals but you wish to stay connected to learn more about Novartis and our career opportunities, join the Novartis Network here: https://talentnetwork.novartis.com/network

The salary for this position is expected to range between $108,500 and $ 201,500 per year.

The final salary offered is determined based on factors like, but not limited to, relevant skills and experience, and upon joining Novartis will be reviewed periodically. Novartis may change the published salary range based on company and market factors.

Your compensation will include a performance-based cash incentive and, depending on the level of the role, eligibility to be considered for annual equity awards.

US-based eligible employees will receive a comprehensive benefits package that includes health, life and disability benefits, a 401(k) with company contribution and match, and a variety of other benefits. In addition, employees are eligible for a generous time off package including vacation, personal days, holidays and other leaves.

To learn more about the culture, rewards and benefits we offer our people click here.

EEO Statement:

The Novartis Group of Companies are Equal Opportunity Employers. We do not discriminate in recruitment, hiring, training, promotion or other employment practices for reasons of race, color, religion, sex, national origin, age, sexual orientation, gender identity or expression, marital or veteran status, disability, or any other legally protected status.

Accessibility and reasonable accommodations

The Novartis Group of Companies are committed to working with and providing reasonable accommodation to individuals with disabilities. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the application process, or to perform the essential functions of a position, please send an e-mail to [email protected] or call +1(877)395-2339 and let us know the nature of your request and your contact information. Please include the job requisition number in your message.

Salary Range

$108,500.00 - $201,500.00

Skills Desired

Audits Compliance, Business Acumen, Communication, Compliance Management, Compliance Risk Management, Compliance Training, Influencing Skills, Operational Excellence (OpEx), Quality Assurance (QA)

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against novartis's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on novartis's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    novartis's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.