IAM Security Architect

Job Description Summary

As part of the Security Architecture & Advisory team, the Identity & Access Management (IAM) Security Architect will be responsible for security of design and implementations of Sandoz's IAM landscape. He will play a critical role in ensuring the confidentiality, integrity, and availability of our IAM systems and data, while also ensuring compliance with industry regulations and internal security policies.

Job Description

IAM Security Architect

Sandoz continues to go through an exciting and transformative period as a global leader and pioneering provider of sustainable Biosimilar and Generic medicines. As we continue down this new and ambitious path, unique opportunities will present themselves, both professionally and personally. Join us, the future is ours to shape

Job Summary

As part of the Security Architecture & Advisory team, the Identity & Access Management (IAM) Security Architect will be responsible for security of design and implementations of Sandoz's IAM landscape. He will play a critical role in ensuring the confidentiality, integrity, and availability of our IAM systems and data, while also ensuring compliance with industry regulations and internal security policies.

Your Key Responsibilities

Your responsibilities include, but are not limited to:

• Architect and design secure IAM solutions, such as SailPoint IdentityNow, MS Entra ID, CyberArk, SAP Identity Cloud Service, SAP GRC, considering industry best practices, regulatory requirements, and organizational needs.
• Develop and enforce IAM security policies, standards, and procedures, ensuring compliance with internal and external security requirements.
• Conduct comprehensive security assessments of existing IAM solutions, identifying vulnerabilities, and recommending appropriate remediation strategies.
• Provide guidance and support to development teams on secure IAM solution design, development, and configuration.
• Collaborate with other security architects and teams within the Information Security, Resilience & Compliance (ISRC) department to develop customized incident response plans for IAM security events and actively contribute to incident response activities as necessary.
• Advise stakeholders, management, and executives on IAM security.
• Develop and maintain strong relationships with key vendors and strategic external partners.
• Work collaboratively with product teams and key stakeholders to determine business and user requirements for end-user devices

Minimum Requirements

What you'll bring to the role:

• University degree or equivalent experience in computer science, engineering, information technology or other relevant field(s)
• Fluent in written and spoken English
• At least 8 years' experience as an IAM Security Architect or in a similar role, with a focus on securing systems with IAM solutions
• Strong knowledge and direct experience of IAM solutions design and integrations and experience in implementing multi-factor authentication, single sign-on, identity management, identity federation, role management, PKI and related technologies.
• Solid security architecture and engineering background
• Excellent negotiation, communication, and interpersonal skills, ability to develop influential relationships with different stakeholders across all levels.
• Experience working in a global company

Preferred Requirements:

• Knowledge and experience of industry standards such as NIST, ISO 27001, CIS Controls, Cyber Essentials and legislatives like GDPR, NIS is a plus
• Certification or accreditation in Information Security (CISSP, CISM, CISA, etc.) and/or relevant vendor specific certifications is a plus

Why Sandoz?

Generic and Biosimilar medicines are the backbone of the global medicines industry. Sandoz, a leader in this sector, provided more than 900 million patient treatments across 100+ countries in 2024 and while we are proud of this achievement, we have an ambition to do more

With investments in new development capabilities, production sites, new acquisitions, and partnerships, we have the opportunity to shape the future of Sandoz and help more patients gain access to low-cost, high-quality medicines, sustainably.

Our momentum is powered by an open, collaborative culture driven by our talented and ambitious colleagues, who, in return for applying their skills experience an agile and collegiate environment with impactful, flexible-hybrid careers, where diversity is welcomed and where personal growth is supported

Join us

#Sandoz

Skills Desired

Communication Skills, Cyber-Security Regulation, Cyber Threat Hunting, Cyber Threat Intelligence (Cti), Cyber Threat Management, Cyber Vulnerabilities, Decision Making Skills, Influencing Skills, Information Security Risk Management

---