Novartis
GRC Compliance Senior Analyst
$108K–$202K
Durham · Senior · Full-time · Posted Oct 15, 2026
- Experience
- Over 8+ years in the listed security, risk, audit, governance, and GRC areas.
- Education
- University degree in business/technical/scientific area or comparable education/experience.
About the job
Supports global information security, risk, and compliance across business applications, IT/OT services, and manufacturing, maintaining regulatory compliance and audit readiness.
What you'll do
- Advise Operations IT/OT on governance and risk, and oversee a global governance/risk area.
- Monitor information risks and support treatment of threats, issues, and vulnerabilities; deliver governance programs and maintain internal controls.
- Report compliance KPIs and drive improvements, including using AI and automation for risk assessments, control documentation, testing, issue management, and audit support.
What they ask for
- Over 8+ years of experience in Business Information Security and Compliance, IT Risk management, Audit management, Information Governance and Management, or GRC.
- University degree in a business, technical, or scientific area, or comparable education/experience.
- Experience with Good Practice Quality guidelines and regulations (GxP).
- Strong stakeholder management and communication skills, including proficiency in written and spoken English.
Nice to have
- OT security compliance and policy implementation in manufacturing, ideally in pharma.
- AI knowledge and experience; professional security certifications such as CISM, CRISC, CISA, CISSP, or CCSP.
Pay
$108,500.00 - $201,500.00 USD per year (base salary)
Tools
IT/OT, AI
AI focus
Leverage AI and automation to streamline compliance activities, including risk assessments, control documentation, testing, issue management, and audit support.
Model-written summary · the original posting is authoritative