Skip to content
Updated How AI-exposed are the skills employers are hiring for? See the data →

From the employer's careers site First seen 1 Nov 2026

Senior Manager, Site Risk

GSK London, New Oxford Street Hybrid senior full-time

The employer hasn't listed a salary.

Apply on GSK

Description

The Senior Manager, Site Risk leads the site and OT risk monitoring, indexing and automation capability that supports GSK's business-facing Technology Risk and Compliance teams across R&D labs and Supply Chain sites.

This is a delivery leadership role combining hands-on work with team and stakeholder management.

The Site Risk team provides continuous monitoring, risk indexing and automation that GSK's business-facing Technology Risk and Compliance teams rely on to understand and manage cyber exposure at GSK's physical sites.

Key Responsibilities:

  • Lead a defined area of the capability, including its people, delivery and outcomes.
  • Develop team capability through coaching, review and structured feedback.
  • Represent the area in CSO governance and cross-functional forums.
  • Build and maintain a deep understanding of the assets, threat intelligence, risks and controls operating across R&D labs and Supply Chain sites.
  • Build and run continuous control monitoring across sites to provide ongoing visibility into control operating effectiveness.
  • Own and govern the Site Cyber Risk Index model.
  • Build out key risk and performance indicators, and automation.
  • Partner with business partnering teams to provide data, indices and tooling.
  • Perform ad hoc risk assessments across sites as needed.
  • Engage cyber defence and cyber architecture and solutions teams.
  • Partner with OT engineering teams.
  • Track site remediation through to closure and escalate where sites do not act.

Basic Qualifications:

  • Degree in a relevant discipline, or related experience.
  • Demonstrated experience in technology or OT risk in an operational site context.
  • Working knowledge of site or plant risk assessment.
  • Practical experience with stakeholder engagement.
  • Strong background in network security, OT security and operating in regulated environments.
  • Experience building or operating continuous control monitoring.
  • Significant experience in cyber security.
  • Proven experience leading a team or a substantial programme of work.
  • Excellent relationship management, influencing and communication skills.

Benefits: No benefits mentioned.

Working Pattern: This role is based in the United Kingdom and offers a hybrid working model, with 2/3 days a week onsite at our central London HQ.

Skills

Required

  • Automation
  • Cloud Security
  • Cybersecurity
  • Data Integrity
  • Executive Reports
  • Governance Risk Compliance (GRC)
  • Identity Access Management (IAM)
  • IT Governance Risk and Compliance (GRC)
  • Microsoft Power Business Intelligence (PBI)
  • Risk Assessments
  • Risk Management
  • Risk Management Framework
  • Security Architecture Design
  • Security Compliance
  • Security Policies
  • Security Risk
  • ServiceNow Platform
  • Third Party Risk Management
  • Vulnerability Management
  • Web Application Security

Nice to have

  • Familiarity with IEC 62443 and OT security in manufacturing or laboratory settings
  • Working knowledge of NIST CSF and ISO 27001
  • Experience in pharmaceutical or another regulated manufacturing industry
  • Willingness to travel to sites as required
  • Relevant certification such as CRISC, CISM, CISSP, GICSP
  • Experience in pharmaceutical, life sciences or another highly regulated industry
  • Experience partnering with data or analytics teams to build dashboards, indices and visualisations of risk data

Ready to apply?

You apply with the employer directly. Their original posting is here: https://gsk.wd5.myworkdayjobs.com/en-US/GSKCareers/job/UK--London--New-Oxford-Street/Senior-Manager--Site-Risk_450065-1

Apply on GSK