Senior Director, Enterprise Tech Risk & Compliance

GSK; Irvine; Hybrid; GBP 180,000 - 280,000; Full time

Job summary

GSK is seeking a Senior Director, Technology Risk & Compliance Business Partners - Enterprise Systems in the United Kingdom. You will set strategy, lead the enterprise systems risk and compliance functions, and partner with the CISO and executives to manage cyber risk across finance, HR, and core platforms.

The role requires global leadership, budgeting, and stakeholder engagement across geographies. The position offers a hybrid working model with 2/3 days onsite at the London HQ.

Qualifications

• Degree in a relevant discipline, or related experience.
• Demonstrated experience in cyber risk, technology risk or information security governance.
• Working knowledge of risk assessment and risk register management.
• Practical experience with senior business stakeholder engagement.
• Extensive experience in cyber security, including leading a global capability at scale.
• Proven experience leading leaders of teams across multiple geographies.
• Demonstrated ownership of a capability budget and vendor portfolio.
• Excellent influencing and communication skills at executive and board level.
• Experience with service definition and process improvement methodologies.

Responsibilities

• Set the multi-year strategy for Technology Risk & Compliance Business Partners - Enterprise Systems and secure the investment to deliver it.
• Drive a risk-accountable leadership culture and a cyber- and risk-savvy workforce culture in Enterprise Systems.
• Lead the Technology Risk & Compliance Business Partners - Enterprise Systems organisation, including leaders of teams, and own its capability plan.
• Own the budget, vendor portfolio and headcount plan for the capability.
• Represent the capability to the CISO, GSK Tech leadership, auditors and regulators.
• Own the cyber risk and compliance relationship for the assigned area, enterprise systems, including finance, HR and core corporate platforms.
• Identify, analyse and influence the management of cyber security risk across the assigned area.
• Hold operational areas, risk owners and suppliers to account against the Cyber Security Office strategy for the assigned area.
• Build and maintain the cyber risk register for the area, including risk statements, ratings, owners and treatment plans.
• Develop a deep understanding of Enterprise Systems business processes, including Planning, Finance, HR, Procurement, Legal, Facilities and Real Estate, and technologies including ERP systems (particularly SAP) and SaaS technologies including Workday and Salesforce, and guide Enterprise Systems leadership on how the changing technology, threat and regulatory landscapes affect their risk posture.
• Own the Risk & Compliance governance forum (RMCB) for the assigned area, ensuring priority actions, findings and CAPAs are tracked with clear accountabilities.
• Partner with Business Quality Assurance to ensure GxP validation of business-facing application systems and services within the assigned area.
• Provide oversight and coaching to the team on audit and inspection readiness, including hosting of external inspections and regulator/auditor engagements, and on the reporting of CAPA status.
• Provide oversight and coaching to the team on GxP software change management and system release governance for regulated applications within the assigned area.
• Influence across the Cyber Security Office and broader Digital and Tech organisation to identify and shape solutions for effective and efficient risk and compliance management.

Skills

Cloud Security

Cybersecurity

Data Integrity

Executive Reports

Identity Access Management

Risk Assessments

Risk Management

Risk Management Framework

Security Architecture Design

Security Compliance

Security Policies

Security Risk

Third Party Risk Management

Vulnerability Management

Web Application Security

Job description

GSK is seeking a Senior Director, Technology Risk & Compliance Business Partners - Enterprise Systems in the United Kingdom. You will set strategy, lead the enterprise systems risk and compliance functions, and partner with the CISO and executives to manage cyber risk across finance, HR, and core platforms.

The role requires global leadership, budgeting, and stakeholder engagement across geographies. The position offers a hybrid working model with 2/3 days onsite at the London HQ.