DLP & NetSec Governance Expert

Job Description Summary

Sandoz continues to go through an exciting and transformative period as a global leader and pioneering provider of sustainable Biosimilar and Generic medicines. As we continue down this new and ambitious path, unique opportunities will present themselves, both professionally and personally. Join us, the future is ours to shape!

We are seeking a highly analytical and detail-oriented DLP & Network Security Governance Expert to support the governance, review, and approval processes related to network security controls and data protection across the organization. This role serves as a key liaison between business stakeholders, Cyber Security, Network Operations, Enterprise Architecture, Compliance, and Risk teams to ensure security-related requests are reviewed consistently, efficiently, and in alignment with approved standards, policies, and business requirements.

Job Description

Sandoz continues to go through an exciting and transformative period as a global leader and pioneering provider of sustainable Biosimilar and Generic medicines. As we continue down this new and ambitious path, unique opportunities will present themselves, both professionally and personally. Join us, the future is ours to shape!

We are seeking a highly analytical and detail-oriented DLP & Network Security Governance Expert to support the governance, review, and approval processes related to network security controls and data protection across the organization. This role serves as a key liaison between business stakeholders, Cyber Security, Network Operations, Enterprise Architecture, Compliance, and Risk teams to ensure security-related requests are reviewed consistently, efficiently, and in alignment with approved standards, policies, and business requirements.

Your Key Responsibilities

Your responsibilities include, but are not limited to

• Review and evaluate firewall rule, proxy access, and USB/removable media exception requests against approved security standards, architecture principles, and governance policies.
• Assess business justifications, security risks, compliance requirements, and potential impacts associated with requested access or exception changes.
• Approve eligible requests and coordinate implementation activities with operational teams while ensuring adherence to defined governance processes.
• Collaborate with business stakeholders and technical teams to clarify requirements, resolve ambiguities, and identify secure alternative solutions where applicable.
• Facilitate coordination between Network Operations, Proxy Administration, Enterprise Architecture, Cyber Security, Compliance, and Risk Management teams throughout the request lifecycle.
• Maintain accurate documentation of governance decisions, approved exceptions, risk assessments, and audit evidence.
• Support the continuous improvement of governance processes, security controls, workflows, and approval procedures to enhance efficiency and compliance.
• Contribute to audit, compliance, reporting, and security governance initiatives while promoting consistent application of organizational security standards.
• KPI: Timely review and approval of security governance requests in accordance with defined service-level targets and compliance requirements.

What you'll bring to the role

Essential Requirements

• Bachelor's degree in Information Technology, Computer Science, Cyber Security, or a related discipline, or equivalent relevant experience.
• Proven experience in Network Security, Network Operations, Cyber Security Governance, or related security governance functions.
• Strong understanding of enterprise networking concepts, network security architecture, and security governance frameworks.
• Hands-on knowledge of firewalls, proxy technologies, web filtering solutions, network traffic flows, segmentation, and access control principles.
• Experience evaluating security-related requests, performing risk assessments, and making risk-based governance decisions.
• Familiarity with security policies, standards, regulatory requirements, exception management processes, and approval workflows.
• Strong analytical, problem-solving, and stakeholder management skills with the ability to balance business and security requirements.
• Excellent written and verbal communication skills, with the ability to engage effectively with both technical and non-technical audiences.
• Fluent English communication skills.

Desirable Requirements

• Industry certifications such as CCNA, CCNP, PCNSE, Fortinet NSE, Zscaler Certifications, CISSP, CISM, or Security+.
• Experience supporting security audits, compliance programs, governance reporting, and continuous improvement initiatives within a complex enterprise environment.

You'll receive

• Competitive compensation and benefits package.
• Flexible and hybrid working opportunities.
• Ongoing learning, professional development, and certification support.
• Exposure to global security and technology initiatives.
• Career growth opportunities within a dynamic and evolving global organization.
• An inclusive, collaborative, and purpose-driven work environment.

Why Sandoz?

Generic and Biosimilar medicines are the backbone of the global medicines industry. Sandoz, a leader in this sector, provided more than 900 million patient treatments across 100+ countries in 2024 and while we are proud of this achievement, we have an ambition to do more!

With investments in new development capabilities, production sites, new acquisitions, and partnerships, we have the opportunity to shape the future of Sandoz and help more patients gain access to low-cost, high-quality medicines, sustainably.

Our momentum is powered by an open, collaborative culture driven by our talented and ambitious colleagues, who, in return for applying their skills experience an agile and collegiate environment with impactful, flexible-hybrid careers, where diversity is welcomed and where personal growth is supported!

Join us!

Skills Desired

Information Security Risk Management, ITIL, Quality Management, Root Cause Analysis (RCA), Sec Ops (Security Operations), Vendor Management