# Senior Director, Technology Risk & Compliance Business Partners - GSC & OT

**Company**: GSK
**Experience**: senior
**Job type**: full-time
**Salary**: $195,000 to $325,000
**Category**: Security
**Industry**: Healthcare

**Apply**: https://gsk.wd5.myworkdayjobs.com/en-US/GSKCareers/job/Home-Worker---USA/Senior-Director--Technology-Risk---Compliance-Business-Partners---GSC---OT_450076?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_03c91d15-964

## Description

GSK is seeking a Senior Director, Technology Risk & Compliance Business Partners - GSC & OT to lead the Technology Risk & Compliance Business Partners - GSC & OT capability across GSK. The successful candidate will set direction for the capability, drive a risk-accountable leadership culture, and lead the organisation that delivers it.

**Key Responsibilities:**

- Set the multi-year strategy for Technology Risk & Compliance Business Partners - GSC & OT and secure investment to deliver it.

- Drive a risk-accountable leadership culture and a cyber- and risk-savvy workforce culture in Global Supply Chain and Operational Technology.

- Lead the Technology Risk & Compliance Business Partners - GSC & OT organisation, including leaders of teams, and own its capability plan.

- Own the budget, vendor portfolio, and headcount plan for the capability.

- Represent the capability to the CISO, GSK Tech leadership, auditors, and regulators.

- Own the cyber risk and compliance relationship for Global Supply Chain and Operational Technology, including manufacturing and laboratory systems.

- Identify, analyse, and influence the management of cyber security risk across the assigned area.

- Hold operational areas, risk owners, and suppliers to account against the Cyber Security Office strategy for the assigned area.

- Build and maintain the cyber risk register for the area.

- Develop a deep understanding of Global Supply Chain business processes.

- Guide Global Supply Chain leadership on how the changing technology, threat, and regulatory landscapes affect their risk posture.

- Own the Risk & Compliance governance forum (RMCB) for the assigned area.

- Partner with Business Quality Assurance to ensure GxP validation of business-facing application systems and services within the assigned area.

- Provide oversight and coaching to the team on audit and inspection readiness.

- Influence across the Cyber Security Office and broader Digital and Tech organisation to identify and shape solutions for effective and efficient risk and compliance management.

**Requirements:**

- Degree in a relevant discipline, or related experience.

- Experience in cyber risk, technology risk, or information security governance.

- Experience with risk assessment and risk register management.

- Experience engaging with senior business stakeholders.

- Experience in cyber security, including leading a global capability at scale.

- Experience leading leaders of teams across multiple geographies.

- Experience owning a capability budget and vendor portfolio.

- Experience influencing and communicating at executive and board level.

**Preferred Qualifications:**

- Experience acting as a business information security officer or embedded security partner.

- Working knowledge of NIST CSF, ISO 27001, and ISO 22301.

- Experience with GRC platforms such as ServiceNow.

- Experience in pharmaceutical or another regulated industry, including GxP and SOX contexts.

- Ability to influence senior stakeholders without direct authority.

- Relevant certification such as CISM, CRISC, CISA, CISSP.

**Salary:** The US annual base salary for new hires in this position ranges from $195,000 to $325,000.

**Benefits:** Available benefits include health care and other insurance benefits (for employee and family), retirement benefits, paid holidays, vacation, and paid caregiver/parental and medical leave.

## Skills

### Required
- Cloud Security
- Cybersecurity
- Data Integrity
- Executive Reports
- Identity Access Management (IAM)
- Risk Assessments
- Risk Management
- Risk Management Framework
- Security Architecture Design
- Security Compliance
- Security Policies
- Security Risk
- Third Party Risk Management
- Vulnerability Management
- Web Application Security

### Nice to have
- NIST CSF
- ISO 27001
- ISO 22301
- ServiceNow
- GRC platforms
- CISM
- CRISC
- CISA
- CISSP

---

Source: [Apply at gsk.wd5.myworkdayjobs.com](https://gsk.wd5.myworkdayjobs.com/en-US/GSKCareers/job/Home-Worker---USA/Senior-Director--Technology-Risk---Compliance-Business-Partners---GSC---OT_450076?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)