Senior Director, Tech Risk & Compliance: GSC & OT

GlaxoSmithKline; Philadelphia (Philadelphia County); On-site; USD 195,000 - 325,000; Full time

Benefits offered by this job

Health insurance

Retirement benefits

Paid holidays

Paid vacation

Parental leave

Job summary

GlaxoSmithKline is seeking a Senior Director to lead Technology Risk & Compliance Business Partners for GSC & OT, shaping strategy and guiding a global team responsible for cyber risk and compliance across Global Supply Chain and Operational Technology.

You will own the budget, engage with executives and regulators, and drive a risk-aware culture while ensuring GxP and SOX governance across manufacturing and laboratories.

Qualifications

• Degree in a relevant discipline, or related experience.
• Experience in cyber risk, technology risk or information security governance.
• Experience with risk assessment and risk register management.
• Experience engaging with senior business stakeholders.
• Experience in cyber security, including leading a global capability at scale.
• Experience leading leaders of teams across multiple geographies.
• Experience owning a capability budget and vendor portfolio.
• Experience influencing and communicating at executive and board level.
• Experience with service definition and process improvement methodologies

Responsibilities

• Set the multi-year strategy for Technology Risk & Compliance Business Partners - GSC & OT and secure the investment to deliver it.
• Drive a risk-accountable leadership culture and a cyber- and risk-savvy workforce culture in Global Supply Chain and Operational Technology.
• Lead the Technology Risk & Compliance Business Partners - GSC & OT organisation, including leaders of teams, and own its capability plan.
• Own the budget, vendor portfolio and headcount plan for the capability.
• Represent the capability to the CISO, GSK Tech leadership, auditors and regulators, including supporting risk and compliance for Sarbanes Oxley, Privacy regulations and Anti-Bribery and Corruption.
• Own the cyber risk and compliance relationship for the assigned area, Global Supply Chain and Operational Technology, including manufacturing and laboratory systems.
• Identify, analyse and influence the management of cyber security risk across the assigned area.
• Hold operational areas, risk owners and suppliers to account against the Cyber Security Office strategy for the assigned area.
• Build and maintain the cyber risk register for the area, including risk statements, ratings, owners and treatment plans.
• Develop a deep understanding of Global Supply Chain business processes, including planning, manufacturing, distribution and quality, and supporting Information Technology and Operational Technology including ERP and integrated ecosystems, Manufacturing Execution Systems, Warehouse Management Systems, SCADA and industrial control systems.
• Guide Global Supply Chain leadership on how the changing technology, threat and regulatory landscapes affect their risk posture and influence priorities, investments and roadmaps accordingly.
• Own the Risk & Compliance governance forum (RMCB) for the assigned area, ensuring priority actions, findings and CAPAs are tracked with clear accountabilities.
• Partner with Business Quality Assurance to ensure GxP validation of business-facing application systems and services within the assigned area.
• Provide oversight and coaching to the team on audit and inspection readiness, including hosting of external inspections and regulator/auditor engagements, and on the reporting of CAPA status.
• Provide oversight and coaching to the team on GxP software change management and system release governance for regulated applications within the assigned area.
• Influence across the Cyber Security Office and broader Digital and Tech organisation to identify and shape solutions for effective and efficient risk and compliance management.
• Lead your team in using approved AI tools to improve productivity and ways of working, role-modelling responsible use and follow GSK's Responsible AI, privacy and security requirements

Skills

Cloud Security

Cybersecurity

Risk Assessments

Executive Reports

IAM

Risk Management

Security Architecture

Vulnerability Management

Education

Bachelor's degree

Tools

ServiceNow GRC

Power BI

Job description

GlaxoSmithKline is seeking a Senior Director to lead Technology Risk & Compliance Business Partners for GSC & OT, shaping strategy and guiding a global team responsible for cyber risk and compliance across Global Supply Chain and Operational Technology.

You will own the budget, engage with executives and regulators, and drive a risk-aware culture while ensuring GxP and SOX governance across manufacturing and laboratories.