Job Description Summary We are seeking a hands-on identity security leader who: • Has deep expertise in Active Directory Security and Microsoft Entra ID Security. • Understands identity attack techniques and modern cyber threats. • Has experience securing hybrid identity environments at enterprise scale. • Can influence strategy while remaining technically credible. • Has strong working knowledge of Microsoft 365 security technologies. • Can engage effectively with security leadership, auditors, architects, and engineering teams. Job Description Key Responsibilities: Serve as the enterprise subject matter expert and senior technical leader for Microsoft Entra ID, Hybrid Identity, and emerging Agentic Identity security. Own the security architecture, design, operational governance, and control framework for Microsoft Entra ID, including B2B/B2C, workload identities, and agent identities. Define and implement identity security standards, hardening baselines, Conditional Access controls, Zero Trust principles, and security guardrails across the identity ecosystem. Lead identity threat detection, protection, incident response, and recovery, including investigations involving compromised identities, risky users/sign-ins, password-spray attacks, and other identity-based threats. Identify and remediate identity security weaknesses and attack paths, partnering with Cyber Defense and SOC teams to strengthen detection and response capabilities. Govern privileged access, administrative accounts, application onboarding, provisioning, and identity lifecycle controls across large-scale enterprise environments. Establish and track identity security KPIs, KRIs, control effectiveness, operational health, and risk-reduction metrics, providing clear updates to security leadership. Provide technical leadership for complex, multi-year identity transformation initiatives, resolving architectural and operational roadblocks and driving secure, scalable solutions. Support internal and external audits, regulatory requirements, and compliance reviews by ensuring identity controls, evidence, and governance processes are effective and audit-ready. Drive operational excellence through automation, engineering discipline, continuous improvement, innovation, and adoption of emerging identity-security capabilities. Essential Requirement : 10–12+ years of experience in enterprise Identity and Access Management, with significant hands-on responsibility for large-scale Microsoft Entra ID and hybrid identity environments. Deep technical expertise in Microsoft Entra ID security, including Conditional Access, External Identities, Identity Protection, Identity Governance, privileged access, application integration, and provisioning technologies such as SCIM. Strong knowledge of Identity Threat Detection and Response (ITDR), identity attack techniques, prevention controls, incident response, and recovery strategies. Proven experience designing and implementing identity controls aligned with Zero Trust architecture, security governance, and enterprise risk-management principles. Demonstrated ability to lead complex, multi-year identity-security programmes as a senior technical expert, resolving architectural challenges and translating strategy into practical solutions. Experience operating in a large, highly regulated enterprise environment, with a strong understanding of audit, compliance, control design, and evidence requirements. Ability to analyse identity-security data, identify risks and attack paths, define remediation priorities, and communicate technical risks clearly to senior stakeholders. Strong stakeholder-management and leadership skills, with the ability to engage effectively with security leadership, auditors, architects, engineering teams, Cyber Defense, and SOC functions. Desirable Requirement : Strong working knowledge of Active Directory and hybrid identity architecture; relevant certifications such as Microsoft Identity and Access Administrator (SC-300), Microsoft Azure Security Engineer (AZ-500), CISSP, or CISM are advantageous. Knowledge of emerging Agentic Identity and AI-agent governance models, including lifecycle, access, security, monitoring, and accountability considerations. You’ll receive: You can find everything you need to know about our benefits and rewards in the Novartis Life Handbook. https://www.novartis.com/careers/benefits-rewards Commitment to Diversity and Inclusion: Novartis is committed to building an outstanding, inclusive work environment and diverse teams' representative of the patients and communities we serve. Join our Novartis Network: If this role is not suitable to your experience or career goals but you wish to stay connected to hear more about Novartis and our career opportunities, join the Novartis Network here: https://talentnetwork.novartis.com/network Skills Desired Business Acumen, Change Management, Escalation Management, Information Security Auditing, Information Security Risk Management, Operational Excellence (OpEx), Quality Management, Root Cause Analysis (RCA), Security Operations, Vendor Management Improving the lives of people living with disease takes more than innovative science. It takes a focus on the needs of people and a community committed to meeting them. It takes a team of people like you. Working together. Learning together. Thriving together. Discover how you can join us in changing people’s lives. Novartis is aware of employment scams which make false use of our company name or leader’s names or recruiter’s names to defraud job seekers. Novartis does not make job offers without interview and never asks candidates for money. If you have encountered a job posting or been approached with a job offer that you suspect may be fraudulent, we strongly recommend you do not respond, send money or personal information. Novartis is not responsible for any claims, losses, damages, or expenses resulting from scams. In the context of China Cross-Border Data Transfer (CBDT) policy, if you need to apply for a position in China, please go to the local Recruiting System TaleNov .

Assoc. Dir. DDIT ISC Identity & Access Management AD.

more at Novartis.

Associate Director DDIT ISC SecOps Access&Auth.ISC Access Management & Authentication

Vodja medicinskih zadev terapevtskega področja in sodelavec za povezavo z medicinsko znanostjo (m/ž/d) -- MSL / Medical Manager Oncology (m/f/d)

Senior eCompliance Manager

similar roles.

Senior Privacy Compliance Analyst

FOIA Litigation and Appeals Analyst

Senior Security Researcher

Cloud Security Architect (Sr)

Head of Threat Intelligence

Senior Security & Data Analyst