ServiceNow Risk & Security Technical Product Owner

GSK; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

GSK is seeking a highly skilled ServiceNow Risk & Security Technical Product Owner to maximise value by translating business needs into a prioritised backlog and guiding delivery across the product lifecycle.

You will own technical solution design for ServiceNow Risk & Security, governance of configurations, and collaboration with stakeholders to ensure secure, compliant outcomes grounded in enterprise standards.

Qualifications

• Bachelor's or Master's degree in a relevant field (e.g., Computer Science, Information Technology, or Engineering) or equivalent experience.
• Industry certifications desirable (e.g. Agile Methodologies).
• Experience defining and prioritising functional requirements and managing a product backlog.

Responsibilities

• Own and manage the Product backlog (e.g. Jira, ADO), ensuring epics, features, and user stories are well-defined.
• Lead delivery with Engineers, Architects and Testers to ensure secure, compliant, and fit-for-purpose solutions.
• Define and maintain technical solution designs, policies, and risk/controls within ServiceNow Risk & Security.
• Provide escalation point for product issues and drive continuous improvement in adoption and performance.

Skills

ServiceNow

GRC

Security Operations

Risk management

Data protection

Agile

Education

Bachelor's/Master's in CS/IT/Eng

Tools

Jira

Azure DevOps

Job description

ServiceNow Risk & Security Technical Product Owner Why Us! At GSK, we unite science, technology and talent to get ahead of disease together. We are a global biopharma company with a special purpose – to unite science, technology and talent to get ahead of disease together. We’re proud to be leading a healthcare revolution, and we’re looking for people who can help us deliver on our ambition

Job Purpose

The ServiceNow Risk & Security Technical Product Owner is responsible for maximising the value of ServiceNow Risk & Security by translating business needs into a prioritised backlog and leading delivery across the product lifecycle, within strategic and financial guardrails set by the ServiceNow Business Service, Risk & Security Product Manager and the Senior Director of ServiceNow Platform & Enterprise Tools. In addition to core product ownership responsibilities, the Technical Product Owner brings hands‑on technical depth in ServiceNow GRC, Security Operations and Integrated Risk Management (IRM) module configuration – taking direct accountability for solution design decisions, technical backlog definition and the integrity of ServiceNow configurations delivered within the product whilst also ensuring vulnerability management processes are executed in line with GSK SLA’s. They work closely with business stakeholders to define outcomes and ensure delivered functionality is usable, secure, compliant, supportable, and aligned to product strategy. The ServiceNow Risk & Security Technical Product Owner guides Product Analysts and works with delivery teams to ensure requirements are clear, technically grounded, value‑driven, and data‑informed, while overseeing iterative delivery that improves product performance, adoption, and operational readiness.

Key Responsibilities

Partner with business stakeholders to understand functional needs, refine requirements, and define product outcomes that support business priorities, within guardrails set by the ServiceNow Business Service, Risk & Security Product Manager and the Senior Director of ServiceNow Platform & Enterprise Tools. Own and manage the Product backlog (e.g. Jira, ADO etc), ensuring requirements (e.g., epics, features, user stories) are well‑defined, technically-validated and supported by minimum data inputs (e.g., cost drivers, user volumes, risk/sensitivity, process impact, dependencies). Make prioritisation decisions for the Product backlog based on value, cost, risk, business continuity, and resource capacity – applying technical judgement on implementation feasibility, configuration complexity and ServiceNow platform constraints - escalating only where strategic trade‑offs are required by the ServiceNow Business Service, Risk & Security Product Manager and the Senior Director of ServiceNow Platform & Enterprise Tools. Lead the Product team’s delivery activities, guiding Product Analysts and working with Engineers, Architects, and Testers to ensure solutions are fit‑for‑purpose, secure, compliant, supportable, and aligned to architectural standards. Own technical solution design for ServiceNow Risk & Security features, including configuration of GRC policies, control frameworks, risk scoring models, Security incident workflows and Vulnerability Response processes – ensuring designs are documented, peer‑reviewed and aligned to enterprise security and compliance standards. Act as the primary technical authority for the ServiceNow Risk & Security product, governing configuration standards, assessing the technical impact of platform upgrades and patch releases and maintaining configuration documentation, technical debt register entries and architectural decision records for the product. Drive operational readiness by applying a delivery readiness checklist covering support model requirements, training needs, continuity planning, configuration/runbook documentation, release notes, and user onboarding. Define and maintain the Product performance dashboard, tracking adoption, cycle time/throughput, stability/defects, UX signals (e.g., CSAT, SUS, completion rates), and support effort; use performance insights to drive continuous improvement. Ensure product changes follow required security controls, risk assessments, data handling policies, and regulated change processes, obtaining approvals from relevant SMEs where required. Support Solution Architects to assess design options and manage cross‑Product dependencies, contract/interface impacts, and sequencing needs to support interoperability and consistent business outcomes. Act as an escalation point for the Product team and business users on functional product issues, guiding decisions within agreed financial, risk, and architectural guardrails set by the ServiceNow Business Service, Risk & Security Product Manager and the Senior Director of ServiceNow Platform & Enterprise Tools. Contribute to the improvement of delivery practices within the Product, promoting agile (i.e. SaFe, Scrum etc), iterative, value‑driven, and data‑led ways of working, including meaningful measurement of benefits and operational impact.

Why You!

We are seeking professionals with the following required skills and qualifications to help us achieve our goals: Bachelor's or Master's degree in a relevant field (e.g., Computer Science, Information Technology, or Engineering), or equivalent experience. Industry certifications highly desirable (e.g. Agile Methodologies, CPM). Experience working in product delivery, digital solutions, business systems, or process‑led technology roles. Proven experience defining and prioritising functional requirements (e.g., epics, features, user stories) and managing a product backlog. Experience working within Enterprise HR Technology, Service Management, Corporate Systems, Legal & Compliance etc) Experience working directly with business stakeholders to translate needs into feasible, value‑led technology changes. Demonstrated ability to make prioritisation decisions based on business value, process impact, risk, cost, and technology constraints. Experience leading delivery teams or analysts through the product lifecycle, from refinement and design through testing, release, and adoption. Familiarity with enterprise governance requirements such as change control, security, data protection, and regulatory/compliance considerations. Exposure to continuous improvement approaches (e.g., automation, process simplification, user‑centred enhancements) that uplift product adoption, stability, or user experience. Experience working within agile delivery environments and using iterative planning, delivery, and release practices.

Desirable Experience

Hands‑on expertise in ServiceNow Risk & Security modules – Experience configuring and delivering Integrated Risk Management, GRC, Security Operations, and Vulnerability Response capabilities in complex environments. Strong understanding of ServiceNow CMDB and data model – Ability to design solutions that stay in sync with CMDB and CSDM structures, ensuring consistent risk, vulnerability, and service data across modules. Technical product ownership with MSP delivery partnerships – Proven track record leading technical backlog and solution design while coordinating implementation through managed service providers and third‑party teams. Risk, security, and compliance mindset – Comfortable working with Risk, Security, and Compliance stakeholders to embed controls, support SLA‑driven vulnerability management, and align configurations with enterprise standards.

Other Job‑Related Skills/Background

Strong communication and influencing skills, able to explain technology constraints clearly and support stakeholders in making informed product decisions. Skilled in coaching and guiding Product Analysts and delivery team members to ensure requirements, documentation, and solutions meet business needs and compliance expectations. Able to interpret business processes, user feedback, and operational data to identify opportunities for process simplification, automation, and improved user experience. Comfortable working within structured governance, security, and data protection requirements, ensuring product changes remain controlled, supportable, and compliant. Strong analytical mindset, able to weigh value, risk, complexity, and cost to make prioritisation decisions and sequence backlog items appropriately.

Interested in Joining the Team?

If this role fits your skills and values, we want to hear from you. If you need adjustments during the process, tell us and we will support you. (Please take a personal copy of the Job Description, as this will not be available online post closure of the advert)

Closing Date: 31st October 2026

Working Pattern

This is a hybrid role, with a min of 2/3 days a week onsite at our central London HQ. Fully remote working is not available. #AGTech #LI-Hybrid

What we value

You are practical, inclusive and open to feedback. You bring technical understanding and strong empathy for users. You work in active voice and keep communication simple. You support colleagues and help teams make confident, evidence‑based decisions. You want to grow your product and security skills while delivering outcomes that matter.

Skills

• Cloud Security
• Cybersecurity
• Data Integrity
• Executive Reports
• Identity Access Management (IAM)
• Risk Assessments
• Risk Management
• Risk Management Framework
• Security Architecture Design
• Security Compliance
• Security Policies
• Security Risk
• Third Party Risk Management
• Vulnerability Management
• Web Application Security

Why GSK?

Uniting science, technology and talent to get ahead of disease together. GSK is a global biopharma company with a purpose to unite science, technology and talent to get ahead of disease together. We aim to positively impact the health of 2.5 billion people by the end of the decade, as a successful, growing company where people can thrive. We get ahead of disease by preventing and treating it with innovation in specialty medicines and vaccines. We focus on four therapeutic areas: respiratory, immunology and inflammation; oncology; HIV; and infectious diseases – to impact health at scale. People and patients around the world count on the medicines and vaccines we make, so we’re committed to creating an environment where our people can thrive and focus on what matters most. Our culture of being ambitious for patients, accountable for impact and doing the right thing is the foundation for how, together, we deliver for patients, shareholders and our people. GSK is an Equal Opportunity Employer. This ensures that all qualified applicants will receive equal consideration for employment without regard to race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), parental status, national origin, age, disability, genetic information (including family medical history), military service or any basis prohibited under federal, state or local law. We believe in an agile working culture for all our roles. If flexibility is important to you, we encourage you to explorewith our hiring team whattheopportunitiesare. Shouldyourequireanyadjustmentstoourprocesstoassistyouindemonstrating[e-mail]irynotrelatetoadjustments,wewillnotbeabletosupportyouthroughthesechannels.WehavecreatedaRecruitmentFAQ guide.ClicktheLinkwhereyouwillfindanswerstomultiplequestionswereceive Important noticetoEmployment businesses/AgenciesGSKdoesnotacceptreferralsfromemploymentbusinessesand/oremploymentagenciesinrespectofthe vacancies postedonthissite. All employment businesses/agenciesarerequiredtocontactGSK’s commercial and general procurement/human resources department toobtainpriorwrittenauthorizationbeforereferring any candidates to GSK. The obtainingofpriorwritten authorizationisacondition precedentto