# Senior Manager, Site Risk

**Company**: GSK
**Location**: London, New Oxford Street
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Healthcare

**Apply**: https://gsk.wd5.myworkdayjobs.com/en-US/GSKCareers/job/UK--London--New-Oxford-Street/Senior-Manager--Site-Risk_450065-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_361236ce-b29

## Description

The Senior Manager, Site Risk leads the site and OT risk monitoring, indexing and automation capability that supports GSK's business-facing Technology Risk and Compliance teams across R&D labs and Supply Chain sites.

This is a delivery leadership role combining hands-on work with team and stakeholder management.

The Site Risk team provides continuous monitoring, risk indexing and automation that GSK's business-facing Technology Risk and Compliance teams rely on to understand and manage cyber exposure at GSK's physical sites.

**Key Responsibilities:**

- Lead a defined area of the capability, including its people, delivery and outcomes.

- Develop team capability through coaching, review and structured feedback.

- Represent the area in CSO governance and cross-functional forums.

- Build and maintain a deep understanding of the assets, threat intelligence, risks and controls operating across R&D labs and Supply Chain sites.

- Build and run continuous control monitoring across sites to provide ongoing visibility into control operating effectiveness.

- Own and govern the Site Cyber Risk Index model.

- Build out key risk and performance indicators, and automation.

- Partner with business partnering teams to provide data, indices and tooling.

- Perform ad hoc risk assessments across sites as needed.

- Engage cyber defence and cyber architecture and solutions teams.

- Partner with OT engineering teams.

- Track site remediation through to closure and escalate where sites do not act.

**Basic Qualifications:**

- Degree in a relevant discipline, or related experience.

- Demonstrated experience in technology or OT risk in an operational site context.

- Working knowledge of site or plant risk assessment.

- Practical experience with stakeholder engagement.

- Strong background in network security, OT security and operating in regulated environments.

- Experience building or operating continuous control monitoring.

- Significant experience in cyber security.

- Proven experience leading a team or a substantial programme of work.

- Excellent relationship management, influencing and communication skills.

**Benefits:** No benefits mentioned.

**Working Pattern:** This role is based in the United Kingdom and offers a hybrid working model, with 2/3 days a week onsite at our central London HQ.

## Skills

### Required
- Automation
- Cloud Security
- Cybersecurity
- Data Integrity
- Executive Reports
- Governance Risk Compliance (GRC)
- Identity Access Management (IAM)
- IT Governance Risk and Compliance (GRC)
- Microsoft Power Business Intelligence (PBI)
- Risk Assessments
- Risk Management
- Risk Management Framework
- Security Architecture Design
- Security Compliance
- Security Policies
- Security Risk
- ServiceNow Platform
- Third Party Risk Management
- Vulnerability Management
- Web Application Security

### Nice to have
- Familiarity with IEC 62443 and OT security in manufacturing or laboratory settings
- Working knowledge of NIST CSF and ISO 27001
- Experience in pharmaceutical or another regulated manufacturing industry
- Willingness to travel to sites as required
- Relevant certification such as CRISC, CISM, CISSP, GICSP
- Experience in pharmaceutical, life sciences or another highly regulated industry
- Experience partnering with data or analytics teams to build dashboards, indices and visualisations of risk data

---

Source: [Apply at gsk.wd5.myworkdayjobs.com](https://gsk.wd5.myworkdayjobs.com/en-US/GSKCareers/job/UK--London--New-Oxford-Street/Senior-Manager--Site-Risk_450065-1?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)