Description
GSK is seeking a Senior Director, Technology Risk & Compliance Business Partners - GSC & OT to lead the Technology Risk & Compliance Business Partners - GSC & OT capability across GSK. The successful candidate will set direction for the capability, drive a risk-accountable leadership culture, and lead the organisation that delivers it.
Key Responsibilities:
- Set the multi-year strategy for Technology Risk & Compliance Business Partners - GSC & OT and secure investment to deliver it.
- Drive a risk-accountable leadership culture and a cyber- and risk-savvy workforce culture in Global Supply Chain and Operational Technology.
- Lead the Technology Risk & Compliance Business Partners - GSC & OT organisation, including leaders of teams, and own its capability plan.
- Own the budget, vendor portfolio, and headcount plan for the capability.
- Represent the capability to the CISO, GSK Tech leadership, auditors, and regulators.
- Own the cyber risk and compliance relationship for Global Supply Chain and Operational Technology, including manufacturing and laboratory systems.
- Identify, analyse, and influence the management of cyber security risk across the assigned area.
- Hold operational areas, risk owners, and suppliers to account against the Cyber Security Office strategy for the assigned area.
- Build and maintain the cyber risk register for the area.
- Develop a deep understanding of Global Supply Chain business processes.
- Guide Global Supply Chain leadership on how the changing technology, threat, and regulatory landscapes affect their risk posture.
- Own the Risk & Compliance governance forum (RMCB) for the assigned area.
- Partner with Business Quality Assurance to ensure GxP validation of business-facing application systems and services within the assigned area.
- Provide oversight and coaching to the team on audit and inspection readiness.
- Influence across the Cyber Security Office and broader Digital and Tech organisation to identify and shape solutions for effective and efficient risk and compliance management.
Requirements:
- Degree in a relevant discipline, or related experience.
- Experience in cyber risk, technology risk, or information security governance.
- Experience with risk assessment and risk register management.
- Experience engaging with senior business stakeholders.
- Experience in cyber security, including leading a global capability at scale.
- Experience leading leaders of teams across multiple geographies.
- Experience owning a capability budget and vendor portfolio.
- Experience influencing and communicating at executive and board level.
Preferred Qualifications:
- Experience acting as a business information security officer or embedded security partner.
- Working knowledge of NIST CSF, ISO 27001, and ISO 22301.
- Experience with GRC platforms such as ServiceNow.
- Experience in pharmaceutical or another regulated industry, including GxP and SOX contexts.
- Ability to influence senior stakeholders without direct authority.
- Relevant certification such as CISM, CRISC, CISA, CISSP.
Salary: The US annual base salary for new hires in this position ranges from $195,000 to $325,000.
Benefits: Available benefits include health care and other insurance benefits (for employee and family), retirement benefits, paid holidays, vacation, and paid caregiver/parental and medical leave.