Senior Director, R&D Risk & Compliance Leadership

GSK; United States; On-site; USD 180,000 - 240,000; Full time

Job summary

GSK is seeking a Senior Director of Risk & Compliance Business Partners R&D to set the strategy for risk and compliance across the R&D portfolio, including clinical, discovery, and regulatory technology. You will lead a global team, align with the Cyber Security Office, and advise senior leadership on risk posture amid evolving threats and regulations.

This executive role drives CAPA readiness and strong governance.

Qualifications

• Experience in cyber risk, technology risk, or information security governance.
• Experience conducting risk assessments and managing risk registers.
• Experience in cyber security, including leading a global capability.
• Experience leading people managers across multiple geographies.
• Experience managing a capability budget and vendor portfolio.
• Experience applying service definition and process improvement methodologies.
• Experience engaging senior business stakeholders.
• Influencing and communication skills at executive and board level.

Responsibilities

• Set the multi-year strategy for Risk & Compliance Business Partners R&D and secure the investment to deliver it.
• Drive a risk-accountable leadership culture and a cyber- and risk-savvy workforce culture in R&D.
• Lead the Risk & Compliance Business Partners R&D organisation, including leaders of teams, and own the capability plan.
• Own the budget, vendor portfolio and headcount plan for the capability.
• Represent the capability to the CISO, GSK Tech leadership, auditors and regulators.
• Own the cyber risk and compliance relationship for the assigned area, GSK Research and Development, including clinical, discovery and regulatory technology.
• Develop a deep understanding of Research and Development business processes and strategic business priorities, and guide R&D leadership on how the changing technology, threat and regulatory landscapes affect their risk posture.
• Influence across the Cyber Security Office and broader Digital and Tech organisation to identify and shape solutions for effective and efficient risk and compliance management.
• Build and maintain the cyber risk register for the area, including risk statements, ratings, owners and treatment plans.
• Own the Risk & Compliance governance forum (RMCB) for the assigned area, ensuring priority actions, findings and CAPAs are tracked with clear accountabilities.
• Partner with Business Quality Assurance to ensure GxP validation of business-facing application systems and services within the assigned area.
• Provide oversight and coaching to the team on audit and inspection readiness, including hosting of external inspections and regulator/auditor engagements, and on the reporting of CAPA status.
• Provide oversight and coaching to the team on GxP software change management and system release governance for regulated applications within the assigned area.
• Lead your team in using approved AI tools to improve productivity and ways of working, role-modelling responsible use and follow GSK's Responsible AI, privacy and security requirements

Skills

Cyber risk governance

Risk assessments

Cyber security leadership

People management

Budget & vendor mgmt

Process improvement

Stakeholder engagement

Executive communication

Education

Bachelor's degree

Tools

ServiceNow

Job description

GSK is seeking a Senior Director of Risk & Compliance Business Partners R&D to set the strategy for risk and compliance across the R&D portfolio, including clinical, discovery, and regulatory technology. You will lead a global team, align with the Cyber Security Office, and advise senior leadership on risk posture amid evolving threats and regulations.

This executive role drives CAPA readiness and strong governance.