Description
The Director, Culture and Communities will own the Culture and Communities capability end to end, including its strategy, delivery and performance.
This is a leadership role accountable for the capability and the team that delivers it. The role brings a science-based approach -- grounded in human psychology, behavioural and decision science -- to building a risk-aware culture that produces measurably superior outcomes.
Key responsibilities:
- Own the Culture and Communities capability end to end, including roadmap, delivery and service performance.
- Lead and develop the team, setting priorities and managing performance.
- Own the capability budget and supplier relationships.
- Report capability performance and risk to CSO leadership and governance forums.
- Own the cyber security awareness and behavioural change programme across GSK.
- Apply human psychology, behavioural and decision science to the design of culture and awareness interventions.
- Bring innovative and creative thinking to how GSK builds a risk-aware culture.
- Design and run campaigns which measurably influence the behaviours that drive GSK risk.
- Grow and run the Cyber Defenders security champions network across business units and sites.
- Grow and run the Secure Together community which encourages collaboration and sharing across Pharma and Life Sciences.
Basic Qualifications:
- Degree in a relevant discipline, or related experience.
- Demonstrated experience in security awareness, behavioural change or internal communications.
- Working knowledge of campaign design and measurement.
- Practical experience with stakeholder engagement across a global organisation.
- Working knowledge of human psychology, behavioural science or decision science.
- Proven experience building and growing communities.
- Strong track record of using data and evidence to prove behavioural and cultural outcomes.
- Substantial experience in cyber security.
- Proven experience leading and developing technical or specialist teams.
- Experience managing budget, suppliers and delivery commitments.
- Strong influencing and communication skills with senior stakeholders.
Preferred Qualifications:
- Experience running phishing simulation programmes.
- Content production and communications skill.
- Experience operating across multiple languages and regions.
- Relevant certification such as CISSP, SANS security awareness credentials, CIPP.
- Experience in pharmaceutical, life sciences or another highly regulated industry.
- Background in marketing, psychology or another adjacent behavioural or social science field is desirable.