Site Risk Leader - IT/OT Security & Governance

GSK; Greater London; Hybrid; GBP 110,000 - 160,000; Full time

Job summary

GSK seeks a Senior Manager, Site Risk to lead site and OT risk monitoring, indexing and automation, supporting Technology Risk and Compliance teams across R&D labs and Supply Chain sites. This delivery leadership role combines hands-on work with team and stakeholder management.

This role requires building risk intelligence, running continuous monitoring, and partnering with OT engineering and risk teams. The position is based in the United Kingdom with a hybrid pattern, 2–3 days onsite at our

Qualifications

• Degree in a relevant discipline or related experience.
• Demonstrated experience in technology or OT risk in an operational site context.
• Working knowledge of site or plant risk assessment.
• Practical experience with stakeholder engagement with site and engineering leadership.
• Strong background in network security, OT security and operating in regulated environments.
• Experience building or operating continuous control monitoring, risk indices or key risk/performance indicator models.
• Experience partnering with penetration testing, red team or architecture review functions to assess control effectiveness.
• Significant experience in cyber security within the relevant domain.
• Proven experience leading a team or a substantial programme of work.
• Experience managing delivery to plan, quality and timelines.
• Excellent relationship management, influencing and communication skills.

Responsibilities

• Lead a defined area of the capability, including its people, delivery and outcomes.
• Develop team capability through coaching, review and structured feedback.
• Represent the area in CSO governance and cross-functional forums.
• Build and maintain a deep understanding of the assets, threat intelligence, risks and controls operating across R&D labs and Supply Chain sites, spanning both IT and OT.
• Build and run continuous control monitoring across sites to provide ongoing visibility into control operating effectiveness across IT and OT.
• Own and govern the Site Cyber Risk Index model, ensuring it accurately reflects site risk posture.
• Build out key risk and performance indicators, and automation, to help business-facing Technology Risk and Compliance teams drive and track action and remediation at their sites.
• Partner with the business partnering teams who own the site risk and compliance relationship.
• Perform ad hoc risk assessments across sites as needed.
• Engage cyber defence and cyber architecture and solutions teams to commission services such as penetration testing and detailed architectural reviews.
• Partner with OT engineering teams to understand the operating environment of the technology being assessed.
• Partner with the Risk Intelligence and Decision Support team on gathering and visualising site risk data.
• Track site remediation through to closure and escalate where sites do not act.

Education

Degree in a relevant discipline

Tools

Power BI

Job description

GSK seeks a Senior Manager, Site Risk to lead site and OT risk monitoring, indexing and automation, supporting Technology Risk and Compliance teams across R&D labs and Supply Chain sites. This delivery leadership role combines hands-on work with team and stakeholder management.

This role requires building risk intelligence, running continuous monitoring, and partnering with OT engineering and risk teams. The position is based in the United Kingdom with a hybrid pattern, 2–3 days onsite at our