AI Risk & Compliance Lead for Tech Partners

GlaxoSmithKline; Philadelphia (Philadelphia County); On-site; USD 76,000 - 126,000; Full time

Job summary

GSK is seeking a Lead, Technology Risk & Compliance Business Partners - AI to deliver hands-on risk and compliance support for the Enterprise AI organisation within the Tech function. You will lead discrete workstreams, ensure AI/ML risk considerations are integrated from design to deployment, and monitor controls across generative and agentic AI systems.

You will build risk registers, translate central policies into practical guidance, and collaborate with risk owners and suppliers to uphold

Qualifications

• Degree in a relevant discipline, or related experience.
• Experience in cyber risk, technology risk or information security governance.
• Working knowledge of risk assessment and risk register management.
• Hands-on experience in the cyber security domain.
• Understanding of AI/ML risk and compliance concepts, incl. generative/agentic AI.
• Understanding AI attack modes: prompt injection, data poisoning, model theft, hallucination, unsafe autonomous behaviour; controls to mitigate them.
• Experience independently delivering quality work.
• Experience reviewing analysis and documentation for accuracy.

Responsibilities

• Lead activities to progress cyber risk and compliance for the AI estate.
• Develop understanding of Enterprise AI development/deployment practices; advise on risks.
• Maintain knowledge of AI attack vectors and preventive/detective controls.
• Identify, analyze and manage cyber risk across the assigned area.
• Build and maintain the cyber risk register with statements, ratings, owners, treatments.
• Embed security requirements at project inception; avoid retrofitting later.
• Facilitate risk assessments for new initiatives, systems, and third parties.
• Translate policy and standards into practical guidance for the area.
• Use approved AI tools with governance and Responsible AI practices.

Skills

Cloud Security

Cybersecurity

Data Integrity

IAM

Risk Assessments

Risk Management

Security Architecture

Security Compliance

Security Policies

Security Risk

Third Party Risk

Vulnerability Management

Web App Security

Education

Relevant degree or related experience

Tools

ServiceNow GRC

Power BI

Job description

GSK is seeking a Lead, Technology Risk & Compliance Business Partners - AI to deliver hands-on risk and compliance support for the Enterprise AI organisation within the Tech function. You will lead discrete workstreams, ensure AI/ML risk considerations are integrated from design to deployment, and monitor controls across generative and agentic AI systems.

You will build risk registers, translate central policies into practical guidance, and collaborate with risk owners and suppliers to uphold