Skip to content

Assoc. Dir. DDIT ISC Identity & Access Management AD

Read straight from Novartis's careers page, verified 1d ago.Seekless can tailor your résumé to it.
Seekless can write your résumé for this posting first.
Before you apply
LocationHyderabad (Office)
Work modeon-site
SeniorityDirector
Experience10–12 yrs
Company size10,000+ people
PostedOct 28, 2026 · 1w ago
Verified live1d ago
At a glanceSummarised by Seekless from the posting.
10-12+ years of experience in enterprise Identity and Access Management with hands-on responsibility for large-scale Microsoft Entra ID and hybrid identity environments
Deep technical expertise in Microsoft Entra ID security including Conditional Access, External Identities, Identity Protection, Identity Governance, privileged access, application integration, and provisioning technologies such as SCIM
Strong knowledge of Identity Threat Detection and Response (ITDR), identity attack techniques, prevention controls, incident response, and recovery strategies
Proven experience designing and implementing identity controls aligned with Zero Trust architecture, security governance, and enterprise risk-management principles
Demonstrated ability to lead complex, multi-year identity-security programmes as a senior technical expert
Experience operating in a large, highly regulated enterprise environment with understanding of audit, compliance, control design, and evidence requirements
Ability to analyse identity-security data, identify risks and attack paths, define remediation priorities, and communicate technical risks clearly to senior stakeholders
Strong stakeholder-management and leadership skills, ability to engage effectively with security leadership, auditors, architects, engineering teams, Cyber Defense, and SOC functions
Strong working knowledge of Active Directory and hybrid identity architecture
Relevant certifications such as Microsoft Identity and Access Administrator (SC-300), Microsoft Azure Security Engineer (AZ-500), CISSP, or CISM
Knowledge of emerging Agentic Identity and AI-agent governance models, including lifecycle, access, security, monitoring, and accountability considerations
Skills
Active Directory Security
Microsoft Entra ID Security
Microsoft 365 Security
SCIM
Conditional Access
Identity Protection
Identity Governance
Zero Trust
ITDR
Job Description Summary
We are seeking a hands-on identity security leader who:
• Has deep expertise in Active Directory Security and Microsoft Entra ID Security.
• Understands identity attack techniques and modern cyber threats.
• Has experience securing hybrid identity environments at enterprise scale.
• Can influence strategy while remaining technically credible.
• Has strong working knowledge of Microsoft 365 security technologies.
• Can engage effectively with security leadership, auditors, architects, and engineering teams.
Job Description
Key Responsibilities:
•
Serve as the enterprise subject matter expert and senior technical leader for Microsoft Entra ID, Hybrid Identity, and emerging Agentic Identity security.
•
Own the security architecture, design, operational governance, and control framework for Microsoft Entra ID, including B2B/B2C, workload identities, and agent identities.
•
Define and implement identity security standards, hardening baselines, Conditional Access controls, Zero Trust principles, and security guardrails across the identity ecosystem.
•
Lead identity threat detection, protection, incident response, and recovery, including investigations involving compromised identities, risky users/sign-ins, password-spray attacks, and other identity-based threats.
•
Identify and remediate identity security weaknesses and attack paths, partnering with Cyber Defense and SOC teams to strengthen detection and response capabilities.
•
Govern privileged access, administrative accounts, application onboarding, provisioning, and identity lifecycle controls across large-scale enterprise environments.
•
Establish and track identity security KPIs, KRIs, control effectiveness, operational health, and risk-reduction metrics, providing clear updates to security leadership.
•
Provide technical leadership for complex, multi-year identity transformation initiatives, resolving architectural and operational roadblocks and driving secure, scalable solutions.
•
Support internal and external audits, regulatory requirements, and compliance reviews by ensuring identity controls, evidence, and governance processes are effective and audit-ready.
•
Drive operational excellence through automation, engineering discipline, continuous improvement, innovation, and adoption of emerging identity-security capabilities.
Essential Requirement :
•
10–12+ years of experience in enterprise Identity and Access Management, with significant hands-on responsibility for large-scale Microsoft Entra ID and hybrid identity environments.
•
Deep technical expertise in Microsoft Entra ID security, including Conditional Access, External Identities, Identity Protection, Identity Governance, privileged access, application integration, and provisioning technologies such as SCIM.
•
Strong knowledge of Identity Threat Detection and Response (ITDR), identity attack techniques, prevention controls, incident response, and recovery strategies.
•
Proven experience designing and implementing identity controls aligned with Zero Trust architecture, security governance, and enterprise risk-management principles.
•
Demonstrated ability to lead complex, multi-year identity-security programmes as a senior technical expert, resolving architectural challenges and translating strategy into practical solutions.
•
Experience operating in a large, highly regulated enterprise environment, with a strong understanding of audit, compliance, control design, and evidence requirements.
•
Ability to analyse identity-security data, identify risks and attack paths, define remediation priorities, and communicate technical risks clearly to senior stakeholders.
•
Strong stakeholder-management and leadership skills, with the ability to engage effectively with security leadership, auditors, architects, engineering teams, Cyber Defense, and SOC functions.
Desirable Requirement :
•
Strong working knowledge of Active Directory and hybrid identity architecture; relevant certifications such as Microsoft Identity and Access Administrator (SC-300), Microsoft Azure Security Engineer (AZ-500), CISSP, or CISM are advantageous.
•
Knowledge of emerging Agentic Identity and AI-agent governance models, including lifecycle, access, security, monitoring, and accountability considerations.