Lead, Third Party Risk Management

Job Description

2023 will see Sandoz become a standalone organization! As a global market leader in Generics and Biosimilar medicine, Sandoz is stepping forward from a position of strength! Those joining Sandoz in the coming months will help shape the future of the company, its growth, innovation, culture and how Sandoz impacts the lives of millions. These will be careers with genuine impact! This is one such role!

Are you ready to make a difference?

Job Summary/Purpose :
Create a more secure organizational environment by creating policies and processes, and conducting risk assessments across suppliers, sites, applications, and targets.

Your Key Responsibilities
Your responsibilities include, but not limited to:
Design, implement, and manage core Third-Party Risk Management (TPRM) processes to monitor, mitigate and report on risk from third party relationships, including vendors and clients. This includes leading the TPRM efforts on:
- Vendor risk assessments, vendor audits, vendor onboarding, vendor document refresher/review, vendor termination procedures and compliance with regulatory and contractual requirements
- Monitoring and reporting on risk from key vendors and clients
- Providing periodic risk reports to the Sandoz leadership team on key risks and mitigation strategies
- Leading cross-functional initiatives with business, compliance, legal, and other internal stakeholders to:
- Monitor, mitigate and report on risk from third-party relationships
- Ensure compliance with applicable legal/regulatory and contractual requirements
- Drive continuous process improvement initiatives to maintain alignment with industry best practices
- Improve existing strategies, operations review, oversight planning and reporting
- Create robust quantitative analytical models that deliver key perspective on likely outcomes and uncertainty/risk

Minimum requirements

What youll bring to the role:
- Masters degree in business / technical / scientific area or comparable education / experience
- Certification or accreditation in Information Security (CISM, CISA, CISSP etc.,)
- At least 15 years of experience in Information Security and Compliance
- Experience of running a risk management organisation in regulated environment
- Experience in IT governance, policy development and third-party risk assessment/management
- Excellent negotiation, communication, and interpersonal skills ability to develop influential relationships with different stakeholders across all levels
- Knowledge and experience of industry standards such as ISO 27001, CIS Controls, NIST, Cyber Essentials
- Change Management Champion with experience in leading teams through large-scale IT change/transformation programs
- Highly experienced people leader with the ability to lead and develop diverse teams across wide geographies
- An entrepreneurial mindset driven by curiosity, continuous improvement, and interest in technical advancements and trends

#Orbit

Why Sandoz?
500 million patients were touched by Sandoz generic and biosimilar medicines in 2021 and while were proud of this, we know there is more we could do to continue to help pioneer access to medicines for people around the world.
How will we do this? We believe new insights, perspectives and ground-breaking solutions can be found at the intersection of medical science and digital innovation. That a diverse, equitable and inclusive environment inspires new ways of working.
We believe our potential can thrive and grow in an unbossed culture underpinned by integrity, curiosity and flexibility. And we can reinvent whats possible, when we collaborate with courage to aggressively and ambitiously tackle the worlds toughest medical challenges. Because the greatest risk in life, is the risk of never trying!

Imagine what you could achieve here at Sandoz!

Join our Sandoz Network : If this role is not suitable to your experience or career goals but you wish to stay connected to hear more about Sandoz and our career opportunities, join the Network here: https://talentnetwork.novartis.com/sandoztalentpool

Functional Area

Technology Transformation

Division

SANDOZ

Business Unit

COMMERCIAL OPS EUROPE SZ

Employment Type

Regular

Commitment to Diversity & Inclusion:

Novartis is committed to building an outstanding, inclusive work environment and diverse teams representative of the patients and communities we serve.

Shift Work

No

Early Talent

No
Novartis

Fecha de publicación: 18/03/2023