Senior Director, Enterprise Systems Risk & Compliance

GSK; Camden Town; On-site; GBP 150,000 - 190,000; Full time

Job summary

GSK is seeking a Senior Director of Technology Risk & Compliance Business Partners for Enterprise Systems. This senior leadership role sets strategy, aligns cyber risk requirements with business needs, and leads a global team responsible for governance across ERP, HR, finance, and core platforms.

The role collaborates with the CISO and regulators, ensuring CAPAs and risk registers are maintained while driving risk-aware decision making across multiple geographies.

Qualifications

• Demonstrated experience in cyber risk, technology risk or information security governance.
• Working knowledge of risk assessment and risk register management.
• Practical experience with senior business stakeholder engagement.
• Extensive experience in cyber security at scale.
• Proven experience leading leaders of teams across geographies.

Responsibilities

• Set the multi-year strategy for Technology Risk & Compliance Business Partners - Enterprise Systems and secure the investment to deliver it.
• Drive a risk-accountable leadership culture and a cyber- and risk-savvy workforce culture in Enterprise Systems.
• Lead the Technology Risk & Compliance Business Partners - Enterprise Systems organisation, including leaders of teams, and own its capability plan.
• Own the budget, vendor portfolio and headcount plan for the capability.
• Represent the capability to the CISO, GSK Tech leadership, auditors and regulators.
• Own the cyber risk and compliance relationship for the assigned area, enterprise systems, including finance, HR and core corporate platforms.
• Identify, analyse and influence the management of cyber security risk across the assigned area.
• Hold operational areas, risk owners and suppliers to account against the Cyber Security Office strategy for the assigned area.
• Build and maintain the cyber risk register for the area, including risk statements, ratings, owners and treatment plans.
• Develop a deep understanding of Enterprise Systems business processes, including Planning, Finance, HR, Procurement, Legal, Facilities and Real Estate, and technologies including ERP systems (SAP) and SaaS like Workday/Salesforce.

Skills

Cyber risk

Technology risk

Information security governance

Senior stakeholder engagement

Risk assessment

Risk register management

Budget & vendor portfolio

Leadership across geographies

Influencing & communication

Education

Bachelor's degree or equivalent

Tools

NIST CS

Job description

GSK is seeking a Senior Director of Technology Risk & Compliance Business Partners for Enterprise Systems. This senior leadership role sets strategy, aligns cyber risk requirements with business needs, and leads a global team responsible for governance across ERP, HR, finance, and core platforms.

The role collaborates with the CISO and regulators, ensuring CAPAs and risk registers are maintained while driving risk-aware decision making across multiple geographies.