OT Cyber Security Senior Manager - Risk & Vulnerability Management

GlaxoSmithKline; London; On-site; GBP 60,000 - 100,000; Full time

Job summary

An established industry player is seeking an experienced OT Cyber Security Senior Manager to lead risk and vulnerability management processes. This role involves designing and implementing robust security measures, collaborating with business units, and managing a dedicated team. The successful candidate will play a crucial role in safeguarding operational technology systems and ensuring compliance with industry standards. Join a forward-thinking company that prioritizes innovation and employee growth, and be part of a mission to advance health and well-being globally.

Qualifications

• Bachelor's degree in Computer Science or related field required.
• Professional certifications like CISSP, CISM, or IEC62443 expert preferred.

Responsibilities

• Lead the OT risk management lifecycle and collaborate with business units.
• Conduct periodic OT risk assessments and manage a team of risk analysts.

Skills

Cyber Risk Management

Vulnerability Management

OT Security

Project Leadership

Stakeholder Engagement

MS Office Suite

Education

Bachelor's degree in Computer Science

Professional certifications in Cyber Security

Job description

Nom du site:

UK – London – New Oxford Street, Poznan Business Garden

Date de publication:

Apr 25 2025

At GlaxoSmithKline (GSK), we are dedicated to safeguarding our Operational Technology (OT) systems, which are critical to our laboratory, manufacturing, and environmental management processes. We are establishing a dedicated OT Cybersecurity hub to address and manage risks within our OT environments.

We are seeking an experienced and dynamic OT Cyber Security Senior Manager to lead our risk and vulnerability management processes. In this role, you will be responsible for designing and implementing robust risk and vulnerability management processes, ensuring alignment with key stakeholders, and conducting thorough risk and threat analyses to maintain the security of our OT assets.

In this role you will

1. Lead the OT risk management lifecycle, including risk identification, assessment, mitigation, and acceptance for OT-related security risks, in alignment with internal standards as well as industry best practice for OT (IEC62443)
2. Collaborate with business unit leads to understand security risks within their environments and their relation to compliance requirements.
3. Provide direction for addressing current and emerging risks, driving resource allocation, training, strategic planning, metrics, and monitoring activities.
4. Conduct periodic OT risk assessments to reflect current security risk profiles.
5. Embed OT Risk Assessments into decision-making processes across business units and service categories.
6. Manage a team of risk analysts, reviewing and approving their risk assessment reports.
7. Ensure effective communication between the OT Cyber Hub and business units when vulnerabilities and policy compliance violations are identified.
8. Establish plans to identify OT vulnerabilities and policy compliance violations through vulnerability scanning, patch reporting, management, and penetration testing.
9. Categorize and prioritize OT vulnerabilities.
10. Assess the effectiveness of vulnerability dispositions.
11. Maintain relationships with business unit stakeholders to assist with the remediation of critical-level alerts.
12. Communicate vulnerability data to system and business owners.
13. Establish and implement an OT vulnerability management communication and training plan.
14. Determine necessary protective measures to address vulnerabilities on OT assets.
15. Support patch management and vulnerability management product owners to address business and security needs.

Why you?

Qualifications & Skills:

We are looking for professionals with these required skills to achieve our goals:

• Bachelor's degree in Computer Science or a related field.
• Professional certifications or advanced degrees in Cyber or Information Security, such as IEC62443 expert, CISSP, CISM, CISA, CIPT, CIPM, CRISC, or other relevant certifications.
• Experience in cyber risk and/or vulnerability management roles.
• Experience in OT security roles.
• Proven track record of leading projects and people.
• Proficiency in MS Office Suite.

Preferred Qualifications & Skills:

If you have the following characteristics, it would be a plus:

• In-depth knowledge of IEC62443 standards.
• Exposure to Digital Manufacturing / Industry 4.0 transformation.
• Excellent stakeholder engagement skills, with strong written and oral communication abilities and presentation skills.
• Experience in the pharmaceutical industry.
• Ability to quickly familiarise with internal cybersecurity policies and standards.
• Strong organizational skills with experience in project leadership.
• Demonstrated ability to track deliverables and adhere to planning schedules with attention to detail.
• Ability to work independently and demonstrate a persistent drive to completion.
• Excellent verbal and written communication skills, with the ability to interact professionally with diverse groups, including Product Owners, Project Leads, engineers, executives, managers, and subject matter experts.

Closing Date for Applications: Thursday 8th May 2025 (COB)

Please take a copy of the Job Description, as this will not be available post closure of the advert. When applying for this role, please use the ‘cover letter’ of the online application or your CV to describe how you meet the competencies for this role, as outlined in the job requirements above. The information that you have provided in your cover letter and CV will be used to assess your application.

During the course of your application, you will be requested to complete voluntary information which will be used in monitoring the effectiveness of our equality and diversity policies. Your information will be treated as confidential and will not be used in any part of the selection process. If you require a reasonable adjustment to the application / selection process to enable you to demonstrate your ability to perform the job requirements, please contact 0808 234 4391. This will help us to understand any modifications we may need to make to support you throughout our selection process.

#LI-GSK

Pourquoi GSK ?

Unir la science, la technologie et le talent pour devancer les maladies ensemble.

GSK est une entreprise biopharmaceutique mondiale avec un objectif particulier – unir la science, la technologie et le talent pour devancer les maladies ensemble – afin que nous puissions avoir un impact positif sur la santé de milliards de personnes et offrir des rendements plus solides et plus durables aux actionnaires – en tant qu'organisation où les gens peuvent s'épanouir. Nous prévenons et traitons les maladies avec des vaccins, des médicaments spécialisés et généraux. Nous nous concentrons sur la science du système immunitaire et l'utilisation de nouvelles technologies de plateforme et de données, en investissant dans quatre domaines thérapeutiques principaux (maladies infectieuses, VIH, respiratoire/immunologie et oncologie).

Notre succès dépend absolument de nos employés. Devancer les maladies ensemble concerne notre ambition pour les patients et les actionnaires, mais aussi faire de GSK un endroit où les gens peuvent s'épanouir. Nous voulons que GSK soit un lieu où les gens se sentent inspirés, encouragés et mis au défi d'être les meilleurs qu'ils peuvent être. Un endroit où ils peuvent être eux-mêmes – se sentant les bienvenus, valorisés et inclus. Où ils peuvent continuer à grandir et prendre soin de leur bien-être. Donc, si vous partagez notre ambition, rejoignez-nous à ce moment excitant de notre parcours pour aller de l'avant ensemble.

GSK est un employeur garantissant l'égalité des chances. Cela garantit que tous les candidats qualifiés recevront une considération égale pour l'emploi sans distinction de race, de couleur, de religion, de sexe (y compris la grossesse, l'identité de genre et l'orientation sexuelle), de statut parental, d'origine nationale, d'âge, de handicap, d'informations génétiques (y compris les antécédents médicaux familiaux), de service militaire ou de toute autre base interdite par la loi fédérale, étatique ou locale.

Nous croyons en une culture de travail agile pour tous nos rôles. Si la flexibilité est importante pour vous, nous vous encourageons à explorer avec notre équipe de recrutement quelles sont les opportunités.

Si vous avez besoin d'ajustements à notre processus pour vous aider à démontrer vos forces et capacités, contactez-nous à [e-mail] ou au 0808 234 4391. La ligne d'assistance est disponible de 8h30 à 12h00 du lundi au vendredi, pendant les jours fériés ces horaires et jours peuvent varier.

Veuillez noter que si votre demande ne concerne pas des ajustements, nous ne pourrons pas vous aider par ces canaux. Cependant, nous avons créé un guide FAQ sur le recrutement au Royaume-Uni. Cliquez sur le lien et faites défiler jusqu'à la section Carrières où vous trouverez des réponses à de nombreuses questions que nous recevons.

Avis important aux entreprises/agences de recrutement

GSK n'accepte pas les recommandations des entreprises de recrutement et/ou des agences de recrutement concernant les postes vacants publiés sur ce site. Toutes les entreprises/agences de recrutement doivent contacter le département des achats commerciaux et généraux/ressources humaines de GSK pour obtenir une autorisation écrite préalable avant de référer tout candidat à GSK. L'obtention de cette autorisation écrite préalable est une condition préalable à tout accord (verbal ou écrit) entre l'entreprise/agence de recrutement et GSK. En l'absence de cette autorisation écrite, toute action entreprise par l'entreprise/agence de recrutement sera considérée comme ayant été effectuée sans le consentement ou l'accord contractuel de GSK. GSK ne sera donc pas responsable des frais découlant de telles actions ou des frais découlant de toute recommandation par les entreprises/agences de recrutement concernant les postes vacants publiés sur ce site.