Site Risk Leader: IT & OT Cyber Assurance

GSK; Camden Town; On-site; GBP 90,000 - 130,000; Full time

Job summary

GSK seeks a Senior Manager, Site Risk to lead risk monitoring, indexing and automation across R&D labs and Supply Chain sites, blending hands-on delivery with team leadership.

You will own the Site Cyber Risk Index, develop KPIs, and coordinate with CSO governance, site leadership and OT engineering to improve risk posture.

This role requires a degree, extensive experience in cyber security and risk on industrial environments, and willingness to travel to sites.

Qualifications

• Degree in a relevant discipline or related experience.
• Experience in technology or OT risk in an operational site context.
• Working knowledge of site or plant risk assessment.
• Practical experience with stakeholder engagement with site and engineering leadership.
• Strong background in network security, OT security and operating in regulated environments.
• Experience building or operating continuous control monitoring, risk indices or KPI models.
• Experience partnering with penetration testing, red team or architecture review functions.
• Significant experience in cyber security within the relevant domain.
• Proven experience leading a team or a substantial programme of work.
• Experience delivering to plan, quality and timelines.

Responsibilities

• Lead a defined area of the capability, including its people, delivery and outcomes.
• Develop team capability through coaching, review and structured feedback.
• Represent the area in CSO governance and cross-functional forums.
• Build and maintain a deep understanding of the assets, threat intelligence, risks and controls across IT/OT.
• Build and run continuous control monitoring across sites to provide ongoing visibility into control effectiveness.
• Own and govern the Site Cyber Risk Index model and promote prioritized actions.
• Build out risk and performance indicators, and automation to drive remediation.
• Partner with site risk and compliance teams to engage site leadership effectively.
• Perform ad hoc risk assessments across sites as needed.
• Engage cyber defence and architecture teams to commission services like testing and reviews.
• Collaborate with OT engineering to understand operating environments.
• Coordinate with Risk Intelligence for data gathering and visualization.
• Track site remediation through to closure.

Skills

Technology risk

OT risk

Stakeholder engagement

Cyber security

Leadership

Risk indexing

Automation

Education

Degree in a relevant discipline

Tools

IEC 62443

NIST CSF

ISO 27001

Job description

GSK seeks a Senior Manager, Site Risk to lead risk monitoring, indexing and automation across R&D labs and Supply Chain sites, blending hands-on delivery with team leadership.

You will own the Site Cyber Risk Index, develop KPIs, and coordinate with CSO governance, site leadership and OT engineering to improve risk posture.

This role requires a degree, extensive experience in cyber security and risk on industrial environments, and willingness to travel to sites.