Description
GSK remains committed to achieving bold commercial ambitions for the future. By 2031, we aim to deliver £40 billion in annual sales, leveraging our existing strong performance momentum to significantly increase our positive impact on the health of billions of patients globally.
The Senior Director, Risk & Compliance Business Partners R&D will set direction for the Risk & Compliance Business Partners R&D capability across GSK and lead the organisation that delivers it. This is a senior leadership role accountable for the capability across GSK.
Key Responsibilities:
- Set the multi-year strategy for Risk & Compliance Business Partners R&D and secure the investment to deliver it.
- Drive a risk-accountable leadership culture and a cyber- and risk-savvy workforce culture in R&D.
- Lead the Risk & Compliance Business Partners R&D organisation, including leaders of teams, and own its capability plan.
- Own the budget, vendor portfolio and headcount plan for the capability.
- Represent the capability to the CISO, GSK Tech leadership, auditors and regulators.
- Own the cyber risk and compliance relationship for the assigned area, GSK Research and Development, including clinical, discovery and regulatory technology.
- Develop a deep understanding of Research and Development business processes and strategic business priorities, and guide R&D leadership on how the changing technology, threat and regulatory landscapes affect their risk posture.
- Influence across the Cyber Security Office and broader Digital and Tech organisation to identify and shape solutions for effective and efficient risk and compliance management.
- Build and maintain the cyber risk register for the area, including risk statements, ratings, owners and treatment plans.
- Own the Risk & Compliance governance forum (RMCB) for the assigned area, ensuring priority actions, findings and CAPAs are tracked with clear accountabilities.
- Partner with Business Quality Assurance to ensure GxP validation of business-facing application systems and services within the assigned area.
- Provide oversight and coaching to the team on audit and inspection readiness, including hosting of external inspections and regulator/auditor engagements, and on the reporting of CAPA status.
- Provide oversight and coaching to the team on GxP software change management and system release governance for regulated applications within the assigned area.
- Lead your team in using approved AI tools to improve productivity and ways of working, role-modelling responsible use and follow GSK’s Responsible AI, privacy and security requirements.
Requirements:
- Bachelor's degree.
- Experience in cyber risk, technology risk, or information security governance.
- Experience conducting risk assessments and managing risk registers.
- Experience in cyber security, including leading a global capability.
- Experience leading people managers across multiple geographies.
- Experience managing a capability budget and vendor portfolio.
- Experience applying service definition and process improvement methodologies.
- Experience engaging senior business stakeholders.
- Influencing and communication skills at executive and board level.
Preferred Qualifications:
- Experience acting as a business information security officer or embedded security partner.
- Working knowledge of NIST CSF, ISO 27001 and ISO 22301.
- Experience with GRC platforms such as ServiceNow.
- Experience in pharmaceutical or another regulated industry, including GxP and SOX contexts.
- Ability to influence senior stakeholders without direct authority.
- Relevant certification such as CISM, CRISC, CISA, CISSP.
- Experience in pharmaceutical, life sciences or another highly regulated industry.
- Understanding of Operational Technology (OT) security concepts, ideally applied to a laboratory setting.
Benefits:
- Health care and other insurance benefits (for employee and family)
- Retirement benefits
- Paid holidays
- Vacation
- Paid caregiver/parental and medical leave