Senior Director, R&D Cyber Risk & Compliance

GlaxoSmithKline; Philadelphia (Philadelphia County); On-site; USD 195,000 - 325,000; Full time

Benefits offered by this job

Health benefits

Retirement benefits

Paid holidays

Paid caregiver leave

Job summary

GSK is seeking a Senior Director of Risk & Compliance Business Partners for R&D to set strategy, align cyber risk with business goals, and lead a cross-functional team across clinical, discovery, and regulatory technology.

You will own the capability’s budget, governance, and partnerships with the CISO and regulators, while championing a risk-aware culture and responsible AI practices in a large, global R&D environment.

Qualifications

• Bachelor's degree required.
• Experience in cyber risk, technology risk, or information security governance.
• Experience conducting risk assessments and managing risk registers.
• Experience in cyber security, including leading a global capability.
• Experience leading people managers across multiple geographies.
• Experience managing a capability budget and vendor portfolio.
• Experience applying service definition and process improvement methodologies.
• Experience engaging senior business stakeholders.
• Influencing and communication skills at executive and board level.

Responsibilities

• Set the multi-year strategy for Risk & Compliance Business Partners R&D and secure the investment to deliver it.
• Drive a risk-accountable leadership culture and a cyber- and risk-savvy workforce culture in R&D.
• Lead the Risk & Compliance Business Partners R&D organisation, including leaders of teams, and own its capability plan.
• Own the budget, vendor portfolio and headcount plan for the capability.
• Represent the capability to the CISO, GSK Tech leadership, auditors and regulators.
• Own the cyber risk and compliance relationship for the assigned area, GSK Research and Development, including clinical, discovery and regulatory technology.
• Develop a deep understanding of Research and Development business processes and strategic business priorities, and guide R&D leadership on how the changing technology, threat and regulatory landscapes affect their risk posture.
• Influence across the Cyber Security Office and broader Digital and Tech organisation to identify and shape solutions for effective and efficient risk and compliance management.
• Build and maintain the cyber risk register for the area, including risk statements, ratings, owners and treatment plans.
• Own the Risk & Compliance governance forum (RMCB) for the assigned area, ensuring priority actions, findings and CAPAs are tracked with clear accountabilities.
• Partner with Business Quality Assurance to ensure GxP validation of business-facing application systems and services within the assigned area.
• Provide oversight and coaching to the team on audit and inspection readiness, including hosting of external inspections and regulator/auditor engagements, and on the reporting of CAPA status.
• Provide oversight and coaching to the team on GxP software change management and system release governance for regulated applications within the assigned area.
• Lead your team in using approved AI tools to improve productivity and ways of working, role-modelling responsible use and follow GSK's Responsible AI, privacy and security requirements

Skills

Cloud Security

Cybersecurity

Data Integrity

Executive Reports

Identity Access Management

Risk Assessments

Risk Management

Risk Management Framework

Security Architecture Design

Security Compliance

Security Policies

Security Risk

Third Party Risk Management

Vulnerability Management

Web Application Security

Education

Bachelor's degree

Tools

ServiceNow GRC

Power BI

Job description

GSK is seeking a Senior Director of Risk & Compliance Business Partners for R&D to set strategy, align cyber risk with business goals, and lead a cross-functional team across clinical, discovery, and regulatory technology.

You will own the capability’s budget, governance, and partnerships with the CISO and regulators, while championing a risk-aware culture and responsible AI practices in a large, global R&D environment.