Infrastructure & Endpoint Protection Security Engineer
About this opportunity
Location: Barcelona, Spain #LI-Hybrid 12 days/week in officeInternal job title: Assoc. Dir. DDIT ISC End Points, Servers, Data ProtectionThis role is based in Barcelona. Novartis is unable to offer relocation support for this role: please only apply if this location is accessible for you.
The Security Operations team is looking for an Infrastructure & Endpoint Protection Security Engineer (Associate Director DDIT ISC End Points, Servers, Data Protection) to join us in Barcelona. This role will oversee security operations service line, technology governance and external / internal interfaces in accordance with service operations and management processes.Key Responsibilities: Ensure stable, secure, and compliant operations across Endpoint Protection and Data Protection solutions, including deployment, lifecycle management, and continuous improvementAdvocate, implement, and enforce Novartis security standards, policies, procedures across all supported services and technologies.Manage services in alignment with approved budgets, ensuring cost control and optimizationFoster a culture of high performance, accountability, and innovation within Information Security & ComplianceManage governance of security exceptions and risk acceptance.Collaborate with CSOC to support cybersecurity threat monitoring, detection, and response activities using deployed endpoint protection toolsets, and partner with service lines, platform teams, and application owners to coordinate corrective and preventive actions.Oversee global deployment, health, and compliance of endpoint security agents, driving remediation where gaps are identified.Lead crisis and incident management activities, engaging internal and external stakeholders as required, own Problem Management, ensuring root cause analysis is completed and preventive measures are implemented to avoid recurrence;Drive Service Management and BAU operations, including leadership and oversight of external service providers.Lead the creation, maintenance, and continuous improvement of service documentation, runbooks, and operational procedures; ensure adherence to operational procedures, maintaining system integrity, availability, and security.Essential Requirements:5+ years of experience in IT Security Engineering with strong focus on Endpoint Security and Data Protection, and strong background in Security Operations processes, tooling, and service delivery.Hands-on experience with Endpoint and Data Protection technologies, including: Microsoft Defender for Endpoint, AV, EDR/XDR, Palo Alto Cortex XDR, BeyondTrust Elevated Privlige Management, Zimperium Mobile Threat Defense, Data Loss Prevention (DLP), Information protection solutionsDemonstrated ability to identify, assess, and mitigate security risks, build trust, and maintain credibility with business partners.Proven stakeholder engagement, presentation, and excellent communication skills across technical and senior leadership levels; effective collaborator with senior management, compliance, architecture, application, infrastructure, and Security Operations teams.Clear, structured thinker able to navigate ambiguity, align security solutions to business needs, and drive outcomes.Thrives in a fast‑paced, technology‑driven environment, proactively advancing security capabilities, ability to consistently delivers against commitments, deadlines, and competing priorities.Desirable requirements:Working knowledge of scripting and automation (e.g., PowerShell, Python) to support operational efficiency and automation initiatives.Commitment to Diversity & Inclusion:We are committed to building an outstanding, inclusive work environment and diverse teams representative of the patients and communities we serve.Why Novartis?Our purpose is to reimagine medicine to improve and extend people’s lives and our vision is to become the most valued and trusted medicines company in the world. How can we achieve this? With our people. It is our associates that drive us each day to reach our ambitions. Be a part of this mission and join us! Learn more here: https://www.novartis.com/about/strategy/people-and-cultureJoin our Novartis Network: If this role is not suitable to your experience or career goals but you wish to stay connected to learn more about Novartis and our career opportunities, join the Novartis Network here: https://talentnetwork.novartis.com/networkAccessibility and accommodation:Novartis is committed to working with and providing reasonable accommodation to all individuals. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the recruitment process, or in order to receive more detailed information about the essential functions of a position, please send an e-mail to and let us know the nature of your request and your contact information. Please include the job requisition number in your message.
Job details
How this role compares
Computed from every other active Information Technology role in our database, not just this employer's listings.
We currently track 1097 comparable Information Technology roles across 55 biopharma companies.
Salary context
143 of 1097 peers report a salary range (USD, annualized)
Peers share this role's job function. This posting doesn't list a seniority level, so peers aren't narrowed by seniority either -- the range below may span more levels than usual.
Where these roles are based
Top locations among the 1097 comparable roles
+ 23 more countries
Seniority mix
612 of 1097 peers have a known seniority level
Therapeutic area mix
1 of 1097 peers have a known therapeutic area; the rest are genuinely unlabeled, not hidden
Similar opportunities
The closest matches from our peer group, ranked by how similar they are, not how well you'd qualify for them -- treat this as market context, not a guaranteed shortlist; a weak match is labeled as one below.
How we calculate "similar"
No black box, no LLM guesswork: a deterministic score built from four normalized attributes. Here's this role's own peer group at different match levels, so you can see the mechanism, not just the result.
Every comparison starts from the same 100-point budget: 25 for working in the same function, 40 for the same therapeutic area, 20 for the same or adjacent seniority, 15 for the same country. A dimension we can't confirm on both sides contributes nothing, never a guess, never a free pass.
0 points, never a partial guess. A role we know almost nothing about beyond its function bottoms out at 25%; it never inflates to 100% just because there's little to compare against. Seniority uses a defined ladder (Associate → Manager → Associate Director → Senior → Principal → Director → Senior Director → Executive/VP) so "Director" and "Senior Director" count as adjacent, but "Director" and "Executive/VP" do not.