Director, Global Tech Risk & Compliance

GSK; Philadelphia (Philadelphia County); On-site; USD 195,000 - 325,000; Full time

Benefits offered by this job

Health care and other insurance for员工及

Retirement benefits

Paid holidays

Paid vacation

Paid caregiver/parental and medical le

Job summary

GSK seeks a Senior Director of Technology Risk & Compliance Business Partners - GSC & OT to set direction and lead aGlobal capability across Global Supply Chain and Operational Technology, including manufacturing and laboratories. The role oversees budget, headcount and compliance with SOX, privacy and anti-bribery rules.

This senior leadership position partners with CISO and GSK Tech leadership, drives risk-informed culture, and ensures readiness for audits, regulatory inspections and CAPA

Qualifications

• Degree in a relevant discipline, or related experience.
• Experience in cyber risk, technology risk or information security governance.
• Experience with risk assessment and risk register management.
• Experience engaging with senior business stakeholders.
• Experience in cyber security, including leading a global capability at scale.
• Experience leading leaders of teams across multiple geographies.
• Experience owning a capability budget and vendor portfolio.
• Experience influencing and communicating at executive and board level.
• Experience with service definition and process improvement methodologies

Responsibilities

• Set the multi-year strategy for Technology Risk & Compliance Business Partners - GSC & OT and secure the investment to deliver it.
• Drive a risk-accountable leadership culture and a cyber- and risk-savvy workforce culture in Global Supply Chain and Operational Technology.
• Lead the Technology Risk & Compliance Business Partners - GSC & OT organisation, including leaders of teams, and own its capability plan.
• Own the budget, vendor portfolio and headcount plan for the capability.
• Represent the capability to the CISO, GSK Tech leadership, auditors and regulators, including supporting risk and compliance for Sarbanes Oxley, Privacy regulations and Anti-Bribery and Corruption.
• Own the cyber risk and compliance relationship for Global Supply Chain and Operational Technology, including manufacturing and laboratory systems.
• Identify, analyse and influence the management of cyber security risk across the assigned area.
• Hold operational areas, risk owners and suppliers to account against the Cyber Security Office strategy for the assigned area.
• Build and maintain the cyber risk register for the area, including risk statements, ratings, owners and treatment plans.
• Develop a deep understanding of Global Supply Chain business processes, including planning, manufacturing, distribution and quality, and supporting IT/OT including ERP and integrated ecosystems.
• Guide Global Supply Chain leadership on changing tech, threat and regulatory landscapes and adjust priorities and roadmaps accordingly.
• Own the Risk & Compliance governance forum (RMCB) for the assigned area, ensuring priority actions, findings and CAPAs are tracked with clear accountabilities.
• Partner with Business Quality Assurance to ensure GxP validation of business-facing applications.
• Provide oversight on audit/inspection readiness, hosting external inspections and regulator engagements, and CAPA reporting.
• Provide oversight on GxP software change management and system release governance for regulated applications.
• Influence across the Cyber Security Office to shape solutions for effective risk and compliance management.
• Lead your team in using approved AI tools to improve productivity and follow GSK's Responsible AI, privacy and security requirements.

Skills

Cloud Security

Cybersecurity

Data Integrity

IAM

Risk Assessments

Risk Management

Security Architecture

Security Compliance

Security Policies

Third Party Risk

Vulnerability Management

Web App Security

Education

Degree in a relevant discipline

Tools

ServiceNow GRC

Power BI

Job description

GSK seeks a Senior Director of Technology Risk & Compliance Business Partners - GSC & OT to set direction and lead aGlobal capability across Global Supply Chain and Operational Technology, including manufacturing and laboratories. The role oversees budget, headcount and compliance with SOX, privacy and anti-bribery rules.

This senior leadership position partners with CISO and GSK Tech leadership, drives risk-informed culture, and ensures readiness for audits, regulatory inspections and CAPA