Specialist - Enterprise Patch Management Services

Job Summary

Specialist - Enterprise Patch Management Services

Department - Global HAM, Print & Patch

Company - Novo Nordisk Global Business Services (GBS)

Are you passionate about patching, technology currency, and keeping enterprise systems secure and compliant? We are looking for a Specialist to drive the operations, governance, and continuous improvement of Novo Nordisk's enterprise patch management services. Join us and play a key role in ensuring our global infrastructure remains secure, stable, and compliant through effective patch and vulnerability management practices.

The position

As a Specialist - Enterprise Patch Management Services, you will play a critical role in maintaining the security posture and operational stability of Novo Nordisk's global IT landscape. Your responsibilities will include:

• Managing end-to-end patch management activities across clients, servers, databases, and enterprise platforms, ensuring timely remediation of security vulnerabilities.
• Collaborating closely with the Vulnerability Management Office (VMO), IT Security, Compliance teams, Service Managers, and technology owners to align remediation priorities and risk mitigation plans.
• Supporting the Patch Management Service Manager in reviewing monthly Microsoft patch releases, documenting deployment decisions, and tracking implementation progress.
• Coordinating urgent and ad-hoc patching activities with vendors, infrastructure teams, and service owners to address critical security risks.
• Driving and monitoring patch deployment activities executed by operations vendors, ensuring timely execution, quality, and closure of patching activities.
• Acting as the subject matter expert (SME) for patch management, providing guidance, troubleshooting support, and recommendations to stakeholders.
• Monitoring service performance, patch compliance levels, vulnerability trends, and remediation progress, identifying opportunities for continuous improvement.
• Driving automation and optimisation initiatives to improve patch deployment efficiency, reduce operational effort, and enhance service reliability.
• Maintaining patching documentation, compliance records, deployment plans, risk registers, and audit artefacts.
• Managing and maintaining stakeholder communication channels, including SharePoint sites and regular reporting related to patching and security updates.
• Monitoring vendor security advisories, vulnerability disclosures, and technology updates to proactively address emerging risks.
• Ensuring adherence to Novo Nordisk IT security policies, compliance requirements, audit standards, and enterprise technology standards.
• Contributing to Global Infrastructure Standardisation (GISP/GITO) initiatives by promoting standardised patching and technology currency practices.

Qualifications

We are looking for a candidate who can bring the following skills and experiences to the table:

• Strong experience (7+ years) in IT infrastructure, patch management, vulnerability management, or related operational services, with at least 4 years of hands-on experience managing enterprise patching activities across diverse technology platforms.
• Solid understanding of ITSM processes and tools (e.g., ServiceNow), with experience working in large global organisations.
• Comfortable working in agile delivery models and applying data-driven approaches to improve operational outcomes.

Good to have

• Experience with patch compliance reporting, KPI management, and dashboard creation using Power BI, Excel, or similar platforms.
• Knowledge of vulnerability scoring methodologies and security frameworks such as CVE, CVSS, NIST, and CIS benchmarks.
• Experience working with patch management tools such as SCCM, Microsoft Intune, WSUS, or similar enterprise deployment solutions.
• Knowledge of software lifecycle management, end-of-support (EOS), and technology currency management practices.
• Experience working in regulated environments with compliance, audit, and security governance requirements.
• Exposure to infrastructure automation, scripting, or patch deployment orchestration solutions.

Interpersonal skills

• Excellent communication skills with the ability to engage effectively with technical and non-technical stakeholders across global teams.
• Fluent in spoken and written English.
• Strong stakeholder management and coordination capabilities.
• Analytical mindset with strong problem-solving abilities and a focus on risk reduction.
• Ownership mentality with the ability to drive initiatives independently and deliver results.
• Comfortable working in a global, cross-functional environment with multiple priorities.
• Adaptable and resilient, with the ability to operate effectively under time-sensitive situations and major security events.
• Curious and motivated to continuously learn, improve processes, and stay updated on industry developments.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.