Senior Director, Risk & Compliance Business Partners R&D

GSK; Philadelphia (Philadelphia County); On-site; USD 195,000 - 325,000; Full time

Benefits offered by this job

Health insurance

Retirement benefits

Paid holidays

Vacation leave

Parental leave

Medical leave

Long-term incentive program

Job summary

GSK is seeking a Senior Director, Risk & Compliance Business Partners R&D to lead the R&D risk and compliance capability across the organization. You will direct multi-disciplinary teams, own budgets, and drive governance, risk management, and regulatory readiness for clinical, discovery, and regulatory technology.

The role partners with CISO, GSK Tech leadership and regulators, shaping strategy, CAPAs, and continuous improvement using GxP controls and GRC platforms such as ServiceNow.

Qualifications

• Bachelor's degree required, cyber risk or information security governance experience preferred.
• Experience in risk assessments and risk registers.
• Experience in cyber security leadership across geographies.
• Experience engaging senior stakeholders and managing budgets.

Responsibilities

• Set multi-year strategy for Risk & Compliance R&D and secure investment.
• Drive a risk-aware culture in R&D and cyber readiness.
• Lead the R&D Risk & Compliance org, including team leads and capability plan.
• Own the budget, vendor portfolio and headcount for the capability.
• Represent capability to CISO, Tech leadership, auditors and regulators.
• Own cyber risk and compliance for R&D including clinical, discovery and regulatory tech.
• Understand R&D processes and guide leadership on tech, threat, and regulatory changes.
• Influence across the Cyber Security Office to shape risk solutions.
• Maintain cyber risk register with statements, ratings, owners, and CAPAs.
• Own RMCB governance for the area with tracked actions and CAPAs.
• Partner with QA to ensure GxP validation of systems.
• Provide oversight on audits, inspections, and CAPA reporting.
• Oversee GxP software change management and system release governance.
• Lead the team in using approved AI tools per Responsible AI policy.

Skills

Cloud Security

Cybersecurity

Data Integrity

Executive Reports

IAM

Risk Assessments

Risk Management

Security Architecture

Security Compliance

Security Risk

Third Party Risk

Vulnerability Mgmt

Web Security

Education

Bachelor's degree

CISM

CRISC

CISA

CISSP

Tools

ServiceNow GRC

Power BI

Job description

Business Introduction

GSK remains committed to achieving bold commercial ambitions for the future. By 2031, we aim to deliver £40 billion in annual sales, leveraging our existing strong performance momentum to significantly increase our positive impact on the health of billions of patients globally. Our Ahead Together strategy is centred on early intervention to prevent and alter the course of disease, thereby protecting people and supporting healthcare systems.

Our diverse portfolio consists of vaccines, specialty medicines, and general medicines.

Through continuous innovation and a dedicated focus on scientific and technical excellence, we strive to develop and launch new, groundbreaking treatments that address critical health challenges.

The Senior Director, Risk & Compliance Business Partners R&D will set direction for the Risk & Compliance Business Partners R&D capability across GSK and lead the organisation that delivers it. This is a senior leadership role accountable for the capability across GSK. This role covers GSK Research and Development, including clinical, discovery and regulatory technology.

About the team. The Technology Risk and Compliance Business Partners are the face of the Cyber Security Office to GSK's business and technology areas. Each partner owns the cyber risk and compliance relationship for an assigned area, translating central strategy into what that area actually needs to do, and bringing its risk back into the Cyber Security Office.

Key responsibilities:

This role will provide you the opportunity to lead key activities to progress your career. These responsibilities include some of the following:

• Set the multi-year strategy for Risk & Compliance Business Partners R&D and secure the investment to deliver it.
• Drive a risk-accountable leadership culture and a cyber- and risk‑savvy workforce culture in R&D.
• Lead the Risk & Compliance Business Partners R&D organisation, including leaders of teams, and own its capability plan.
• Own the budget, vendor portfolio and headcount plan for the capability.
• Represent the capability to the CISO, GSK Tech leadership, auditors and regulators.
• Own the cyber risk and compliance relationship for the assigned area, GSK Research and Development, including clinical, discovery and regulatory technology.
• Develop a deep understanding of Research and Development business processes and strategic business priorities, and guide R&D leadership on how the changing technology, threat and regulatory landscapes affect their risk posture.
• Influence across the Cyber Security Office and broader Digital and Tech organisation to identify and shape solutions for effective and efficient risk and compliance management.
• Build and maintain the cyber risk register for the area, including risk statements, ratings, owners and treatment plans.
• Own the Risk & Compliance governance forum (RMCB) for the assigned area, ensuring priority actions, findings and CAPAs are tracked with clear accountabilities.
• Partner with Business Quality Assurance to ensure GxP validation of business-facing application systems and services within the assigned area.
• Provide oversight and coaching to the team on audit and inspection readiness, including hosting of external inspections and regulator/auditor engagements, and on the reporting of CAPA status.
• Provide oversight and coaching to the team on GxP software change management and system release governance for regulated applications within the assigned area.
• Lead your team in using approved AI tools to improve productivity and ways of working, role‑modelling responsible use and follow GSK's Responsible AI, privacy and security requirements.

Why You?

Basic Qualification

We are seeking professionals with the following required skills and qualifications to help us achieve our goals:

• Bachelor's degree.
• Experience in cyber risk, technology risk, or information security governance.
• Experience conducting risk assessments and managing risk registers.
• Experience in cyber security, including leading a global capability.
• Experience leading people managers across multiple geographies.
• Experience managing a capability budget and vendor portfolio.
• Experience applying service definition and process improvement methodologies.
• Experience engaging senior business stakeholders.
• Influencing and communication skills at executive and board level.

Preferred Qualification

If you have the following characteristics, it would be a plus:

• Experience acting as a business information security officer or embedded security partner.
• Working knowledge of NIST CSF, ISO 27001 and ISO 22301.
• Experience with GRC platforms such as ServiceNow.
• Experience in pharmaceutical or another regulated industry, including GxP and SOX contexts.
• Ability to influence senior stakeholders without direct authority.
• Relevant certification such as CISM, CRISC, CISA, CISSP.
• Experience in pharmaceutical, life sciences or another highly regulated industry.
• Understanding of Operational Technology (OT) security concepts, ideally applied to a laboratory setting.

Typical tools and technologies: ServiceNow GRC, Power BI.

#GSKcso

#AGtech

Skills

Cloud Security, Cybersecurity, Data Integrity, Executive Reports, Identity Access Management (IAM), Risk Assessments, Risk Management, Risk Management Framework, Security Architecture Design, Security Compliance, Security Policies, Security Risk, Third Party Risk Management, Vulnerability Management, Web Application Security

The US annual base salary for new hires in this position ranges from $195,000 to $325,000. The US salary ranges take into account a number of factors including work location within the US market, the candidate’s skills, experience, education level and the market rate for the role. In addition, this position offers an annual bonus and eligibility to participate in our share based long term incentive program which is dependent on the level of the role. Available benefits include health care and other insurance benefits (for employee and family), retirement benefits, paid holidays, vacation, and paid caregiver/parental and medical leave. If salary ranges are not displayed in the job posting for a specific country, the relevant compensation will be discussed during the recruitment process.

Please visit GSK US Benefits Summary to learn more about the comprehensive benefits program GSK offers US employees.

Why GSK?

Uniting science, technology and talent to get ahead of disease together.

GSK is a global biopharma company with a purpose to unite science, technology and talent to get ahead of disease together. We aim to positively impact the health of 2.5 billion people by the end of the decade, as a successful, growing company where people can thrive. We get ahead of disease by preventing and treating it with innovation in specialty medicines and vaccines. We focus on four therapeutic areas: respiratory, immunology and inflammation; oncology; HIV; and infectious diseases - to impact health at scale.

People and patients around the world count on the medicines and vaccines we make, so we’re committed to creating an environment where our people can thrive and focus on what matters most. Our culture of being ambitious for patients, accountable for impact and doing the right thing is the foundation for how, together, we deliver for patients, shareholders and our people.

If you require an accommodation or other assistance to apply for a job at GSK, please contact the appropriate Recruitment Staff by emailing us at - [e-mail]

GSK is an Equal Opportunity Employer. This ensures that all qualified applicants will receive equal consideration for employment without regard to race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), parental status, national origin, age, disability, genetic information (including family medical history), military service or any basis prohibited under federal, state or local law.

Important notice to Employment businesses/ Agencies

GSK does not accept referrals from employment businesses and/or employment agencies in respect of the vacancies posted on this site. All employment businesses/agencies are required to contact GSK's commercial and general procurement/human resources department to obtain prior written authorization before referring any candidates to GSK. The obtaining of prior written authorization is a condition precedent to any agreement (verbal or written) between the employment business/ agency and GSK. In the absence of such written authorization being obtained any actions undertaken by the employment business/agency shall be deemed to have been performed without the consent or contractual agreement of GSK. GSK shall therefore not be liable for any fees arising from such actions or any fees arising from any referrals by employment businesses/agencies in respect of the vacancies posted on this site.

Please note that if you are a US Licensed Healthcare Professional or Healthcare Professional as defined by the laws of the state issuing your license, GSK may be required to capture and report expenses GSK incurs, on your behalf, in the event you are afforded an interview for employment. This capture of applicable transfers of value is necessary to ensure GSK’s compliance to all federal and state US Transparency requirements. For more information, please visit the Centers for Medicare and Medicaid Services (CMS) website at https://openpaymentsdata.cms.gov/