Director, Compliance Operations

GlaxoSmithKline; Philadelphia (Philadelphia County); Sur place; USD 157 000 - 261 000; Plein temps

Avantages offerts par ce poste

Health insurance

Retirement benefits

Paid holidays

Vacation

Paid caregiver/parental and medical le

Annual bonus

Long-term incentive program

Résumé du poste

GSK in the US is seeking a Director, Compliance Operations to lead the Compliance Operations function within the Risk Operations Centre, owning IT control SOX testing, license compliance, and software asset management for the Technology organisation.

The role also runs Business Operations, managing budget, headcount, goals, culture and special projects, driving continuous improvement and intelligent automation with Lean Six Sigma.

Qualifications

• Experience in SOX compliance, IT audit, and control testing.
• Experience with ITGC frameworks and evidence standards.
• Experience in software asset management and license compliance.
• Experience leading compliance operations with end-to-end ownership.
• Experience managing budgets and headcount; setting goals and driving engagement.

Responsabilités

• Own IT control SOX testing programme, including scope, test plans, sampling and evidence.
• Track SOX control deficiencies and management actions through to closure.
• Own license compliance and software asset management programme.
• Provide compliance consulting across Privacy, Sanctions and ABC, partnering with Privacy, Legal and Ethics teams.
• Manage the Technology Risk & Compliance Business Operations budget, finances and headcount.
• Drive annual goals, track completion.
• Lead culture-building and engagement activities.
• Take on special projects for the VP, Technology Risk and Compliance.
• Set, monitor, report KPIs; apply Lean Six Sigma for continuous improvement.
• Sponsor and prioritise AI and automation roadmap; improve processes.
• Act as escalation point for Cyber Security Office and GRC stakeholders.
• Lead team in using approved AI tools with Responsible AI and privacy/security rules.

Connaissances

SOX compliance

ITGC testing

License compliance

Budgeting & headcount

Stakeholder management

Process improvement

AI & automation

Formation

Bachelor's degree

Outils

ServiceNow GRC

OneTrust

Power BI

Description du poste

Business Introduction
GSK remains committed to achieving bold commercial ambitions for the future. By 2031, we aim to deliver 40 billion in annual sales, leveraging our existing strong performance momentum to significantly increase our positive impact on the health of billions of patients globally. Our Ahead Together strategy is centred on early intervention to prevent and alter the course of disease, thereby protecting people and supporting healthcare systems.
Our diverse portfolio consists of vaccines, specialty medicines, and general medicines.
Through continuous innovation and a dedicated focus on scientific and technical excellence, we strive to develop and launch new, groundbreaking treatments that address critical health challenges.

The Director, Compliance Operations leads and operationally runs the Compliance Operations function within GSK's Risk Operations Centre, directing the team that owns IT control SOX testing and SOX compliance for GSK, GSK's License Compliance and Software Asset Management programme, and provides compliance consulting and assurance for the Technology organisation across Privacy, Sanctions and Anti-Bribery and Corruption requirements. This role also performs the Business Operations function for the Technology Risk and Compliance organisation, managing budget and finances, headcount, the annual goals and objectives process, culture and engagement, and special projects. This is both an operational execution and process subject-matter-expert role, accountable for the operational effectiveness and efficiency of these services and for driving continuous improvement and intelligent automation.

About the team. Compliance Operations is part of GSK's Risk Operations Centre. The team runs GSK's SOX ITGC testing programme, owns License Compliance and Software Asset Management, provides Privacy, Sanctions and Anti-Bribery and Corruption compliance consulting and assurance to the Technology organisation, and performs the Business Operations function -- budget, headcount, goals and objectives, and culture and engagement -- for the wider Technology Risk and Compliance organisation.

Key responsibilities:

This role will provide you the opportunity to lead key activities to progress your career. These responsibilities include some of the following:

• Own GSK's IT control SOX testing programme, including scope, test plans, sampling, execution and evidence to a standard that external auditors will accept.
• Track SOX control deficiencies and management action plans for GSK's technology environment through to closure.
• Own GSK's License Compliance and Software Asset Management programme, ensuring GSK's software estate is accurately inventoried, licensed and compliant.
• Provide compliance consulting and assurance to the Technology organisation across Privacy, Sanctions and Anti-Bribery and Corruption requirements, partnering with GSK's Privacy, Legal and Ethics & Compliance teams.
• Perform the Business Operations function for the Technology Risk and Compliance organisation, managing its budget, finances and headcount plan.
• Drive the annual goals and objectives process across the Technology Risk and Compliance organisation, including tracking and completion.
• Lead culture-building and engagement activities across the Technology Risk and Compliance organisation.
• Take on special projects on behalf of the VP, Technology Risk and Compliance.
• Set, monitor and report KPIs on the effectiveness and efficiency of Compliance Operations processes, applying Lean Six Sigma methods to drive continuous, measurable improvement.
• Sponsor and prioritise the roadmap for AI agents and intelligent automation that increase the efficiency and effectiveness of the team's processes.
• Act as the escalation point for the function with Cyber Security Office and GRC stakeholders globally, representing Compliance Operations in cross-functional risk and compliance governance forums.
• Lead your team in utilizing approved AI tools to improve productivity and ways of working, role-modelling responsible use and following GSK's Responsible AI, privacy and security requirements.

Why You?

Basic Qualifications

We are seeking professionals with the following required skills and qualifications to help us achieve our goals:
Bachelor's degree.

• Experience in Sarbanes-Oxley (SOX) compliance, information technology audit or control testing.
• Experience applying Sarbanes-Oxley (SOX) information technology general controls frameworks and evidence standards.
• Experience in software asset management and license compliance.
• Experience managing compliance operations with end-to-end ownership of a capability.
• Experience leading and developing teams and managing budgets and headcount.
• Experience managing organisational goal-setting, performance tracking, culture or engagement processes.
• Experience influencing and communicating with senior stakeholders

Preferred Qualifications

If you have the following characteristics, it would be a plus:

• Experience with Privacy, Sanctions or Anti-Bribery and Corruption compliance.
• Working knowledge of software asset management tools and license management practices.
• Experience with GRC tooling such as ServiceNow.
• Experience managing budgets and financial planning for a technology function.
• Relevant certification such as CISA, CPA, CIA, CRISC or a compliance-specific certification (e.g. CCEP).
• Experience in pharmaceutical, life sciences or another highly regulated industry.

Typical tools and technologies: ServiceNow GRC, OneTrust, software asset management tooling, evidence automation tooling, Power BI.

#Li-GSK

#AGTech

#GSKcso

Skills

Cloud Security, Cybersecurity, Data Integrity, Executive Reports, Identity Access Management (IAM), Risk Assessments, Risk Management, Risk Management Framework, Security Architecture Design, Security Compliance, Security Policies, Security Risk, Third Party Risk Management, Vulnerability Management, Web Application SecurityThe US annual base salary for new hires in this position ranges from $156,750 to $261,250. The US salary ranges take into account a number of factors including work location within the US market, the candidate's skills, experience, education level and the market rate for the role. In addition, this position offers an annual bonus and eligibility to participate in our share based long term incentive program which is dependent on the level of the role. Available benefits include health care and other insurance benefits (for employee and family), retirement benefits, paid holidays, vacation, and paid caregiver/parental and medical leave. If salary ranges are not displayed in the job posting for a specific country, the relevant compensation will be discussed during the recruitment process.

Please visit GSK US Benefits Summary to learn more about the comprehensive benefits program GSK offers US employees.

Why GSK?

Uniting science, technology and talent to get ahead of disease together.

GSK is a global biopharma company with a purpose to unite science, technology and talent to get ahead of disease together. We aim to positively impact the health of 2.5 billion people by the end of the decade, as a successful, growing company where people can thrive. We get ahead of disease by preventing and treating it with innovation in specialty medicines and vaccines. We focus on four therapeutic areas: respiratory, immunology and inflammation; oncology; HIV; and infectious diseases - to impact health at scale.

People and patients around the world count on the medicines and vaccines we make, so we're committed to creating an environment where our people can thrive and focus on what matters most. Our culture of being ambitious for patients, accountable for impact and doing the right thing is the foundation for how, together, we deliver for patients, shareholders and our people.

If you require an accommodation or other assistance to apply for a job at GSK, please contact the appropriate Recruitment Staff by emailing us at [e-mail]

GSK is an Equal Opportunity Employer. This ensures that all qualified applicants will receive equal consideration for employment without regard to race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), parental status, national origin, age, disability, genetic information (including family medical history), military service or any basis prohibited under federal, state or local law.

Important notice to Employment businesses/ Agencies

GSK does not accept referrals from employment businesses and/or employment agencies in respect of the vacancies posted on this site. All employment businesses/agencies are required to contact GSK's commercial and general procurement/human resources department to obtain prior written authorization before referring any candidates to GSK. The obtaining of prior written authorization is a condition precedent to any agreement (verbal or written) between the employment business/ agency and GSK. In the absence of such written authorization being obtained any actions undertaken by the employment business/agency shall be deemed to have been performed without the consent or contractual agreement of GSK. GSK shall therefore not be liable for any fees arising from such actions or any fees arising from any referrals by employment businesses/agencies in respect of the vacancies posted on this site.

Please note that if you are a US Licensed Healthcare Professional or Healthcare Professional as defined by the laws of the state issuing your license, GSK may be required to capture and report expenses GSK incurs, on your behalf, in the event you are afforded an interview for employment. This capture of applicable transfers of value is necessary to ensure GSK's compliance to all federal and state US Transparency requirements. For more information, visit https://openpaymentsdata.cms.gov/