Head of Risk Automation & Intelligence

GSK

Greater London

On-site

GBP 146,000 - 243,000

Full time

34 hours ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

GSK is seeking a Senior Director for Risk Automation & Intelligence to lead strategy and execution of data, analytics and automation across Technology Risk and Compliance. This senior role oversees policy, process, tooling, budgeting and stakeholder engagement at a global level.

You will evolve the Risk Operations Centre, drive AI-enabled automation, and deliver a prioritized roadmap while collaborating with executives, regulators and partners to strengthen cyber risk management.

Qualifications

Bachelor’s degree in a relevant field.
Experience in risk analytics, automation or security data science.
Experience building AI and intelligent automation solutions.
Product management with Agile delivery and translating requirements into roadmap.
Experience applying Lean Six Sigma or other process excellence methodologies.
Experience delivering data platforms and data pipelines.
Experience leading a technical capability.
Cyber security experience, including leading a global capability.
Experience managing people leaders across geographies.
Experience managing a capability budget and vendor portfolio.
Experience with quantitative risk analysis and statistical methods.
Experience presenting to executive leadership or board-level audiences.

Responsibilities

Set the enterprise vision and multi-year strategy for the data, analytics and automation capabilities that underpin Technology Risk and Compliance at GSK, and secure the investment to deliver it.
Lead the Risk Automation & Intelligence organisation, including leaders of teams, and own its capability plan.
Own the budget, vendor portfolio and headcount plan for the capability.
Represent the capability to the CISO, GSK Tech leadership, auditors and regulators.
Own GSK's Cyber Security Policies, ensuring they remain current, practical and aligned with the evolving threat, technology and regulatory landscape.
Own the Technology Risk and Compliance processes used across GSK, ensuring they are well-designed, consistently applied and continuously improved.
Own the integration between Technology Risk and Compliance and GSK's Enterprise Risk Programme, ensuring technology risk is represented accurately and consistently in enterprise risk reporting and governance.
Operate and evolve GSK's Risk Operations Centre model, bringing modern Risk Operations Centre concepts, continuous controls monitoring and quantitative risk analysis into how GSK manages technology risk and compliance.
Bring product management rigour to the roadmap for risk and compliance tooling, translating the needs of stakeholders at Director, VP and SVP level into prioritised features and releases.
Build and lead the capability that automates risk, control and compliance processes, including AI and intelligent automation, to replace manual effort with proactive, at-scale risk management.
Develop risk analytics, models and quantitative risk methods that help the business identify, evaluate and treat cyber risk, and that support prioritisation and inform resource and investment decisions for leadership, ExCom and the Board.
Develop performance analytics that measure the effectiveness and operational efficiency of the Technology Risk and Compliance programme itself, driving continuous improvement.
Own the data platform and pipelines underpinning risk intelligence, including the tooling used for Board-level Key Risk Indicators, issue and risk management, third-party cyber risk management and software development lifecycle compliance.
Own the GRC tooling strategy, including ServiceNow, ensuring the platforms used across GSK for risk and compliance management are modern, well-integrated and fit for purpose.
Bring fresh, innovative thinking to how GSK instruments and automates risk and compliance, challenging existing approaches to deliver superior outcomes with less manual effort.
Lead your team in using approved AI tools to improve productivity and ways of working, role-modelling responsible use and follow GSK’s Responsible AI, privacy and security requirements.