R&D Cyber Risk & Compliance Director

Gsk; City Of London; Hybrid; GBP 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid work model

London HQ (hybrid)

Job summary

GSK is seeking a Director of Technology Risk & Compliance Business Partners - R&D to lead cyber risk and compliance across the R&D portfolio, with a focus on Cambridge and Ware. You will own risk relationships, guide governance forums, and shape strategy with senior stakeholders.

The role requires strong leadership and experience in regulated environments. The role emphasizes embedding security early in initiatives, managing GxP/regulatory technology, and ensuring continuous improvement in risk

Qualifications

• Proven experience in cyber risk and information security governance.
• Experience leading and developing technical teams.
• Strong engagement with senior business stakeholders.
• Knowledge of risk assessment and risk register management.

Responsibilities

• Lead multi-year strategy for Technology Risk & Compliance across R&D, focusing on Cambridge and Ware sites.
• Drive a risk-aware culture and cyber risk governance across the sites.
• Lead and develop the assigned team, set priorities and manage performance.
• Report capability performance and risk to CSO leadership and governance forums.
• Own cyber risk and compliance relationships for R&D, including clinical, discovery and regulatory tech.
• Embed security requirements at the start of initiatives to avoid retrofitting.

Skills

Cyber risk governance

Senior stakeholder engagement

Leadership & people management

Risk assessment & governance

Regulatory knowledge

Education

Degree in a relevant discipline

Certifications: CISM, CRISC, CISA, CISSP

Tools

ServiceNow

Job description

GSK is seeking a Director of Technology Risk & Compliance Business Partners - R&D to lead cyber risk and compliance across the R&D portfolio, with a focus on Cambridge and Ware. You will own risk relationships, guide governance forums, and shape strategy with senior stakeholders.

The role requires strong leadership and experience in regulated environments. The role emphasizes embedding security early in initiatives, managing GxP/regulatory technology, and ensuring continuous improvement in risk