Senior Director, Tech Risk & Compliance (GSC & OT)

GSK

United States

Remote

USD 195,000 - 325,000

Full time

5 days ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Benefits offered by this job

Health insurance

Retirement benefits

Paid time off

Job summary

GSK is seeking a Senior Director, Technology Risk & Compliance Business Partners for GSC & OT. This global leadership role sets direction for the capability across GSK, covering Global Supply Chain and Operational Technology, including manufacturing and laboratory systems.

You will lead the organisation, own the budget and vendor portfolio, drive a risk-aware culture, and partner with executives, regulators and auditors to ensure SOX, privacy and anti-bribery compliance.

Qualifications

Degree in a relevant discipline or related experience.
Experience in cyber risk, technology risk or information security governance.
Experience with risk assessment and risk register management.
Experience engaging with senior business stakeholders.
Experience in cyber security including leading a global capability at scale.
Experience leading leaders of teams across multiple geographies.
Experience owning a capability budget and vendor portfolio.
Experience influencing and communicating at executive and board level.
Experience with service definition and process improvement methodologies.

Responsibilities

Set the multi-year strategy for Technology Risk & Compliance Business Partners - GSC & OT and secure the investment to deliver it.
Drive a risk-accountable leadership culture and a cyber- and risk-savvy workforce culture in Global Supply Chain and Operational Technology.
Lead the Technology Risk & Compliance Business Partners - GSC & OT organisation, including leaders of teams, and own its capability plan.
Own the budget, vendor portfolio and headcount plan for the capability.
Represent the capability to the CISO, GSK Tech leadership, auditors and regulators, including supporting risk and compliance for Sarbanes Oxley, Privacy regulations and Anti-Bribery and Corruption.
Own the cyber risk and compliance relationship for Global Supply Chain and Operational Technology, including manufacturing and laboratory systems.
Identify, analyse and influence the management of cyber security risk across the assigned area.
Hold operational areas, risk owners and suppliers to account against the Cyber Security Office strategy for the assigned area.
Build and maintain the cyber risk register for the area, including risk statements, ratings, owners and treatment plans.
Develop a deep understanding of Global Supply Chain processes and supporting IT/OT including ERP, MES, WMS, SCADA and industrial control systems.
Guide Global Supply Chain leadership on how changing technology and regulatory landscapes affect risk posture and priorities.
Own the Risk & Compliance governance forum (RMCB) for the assigned area with clear action owners.
Partner with Business Quality Assurance to ensure GxP validation of business-facing applications and services.
Provide oversight on audit readiness, regulator engagements, and CAPA reporting.
Oversee GxP software change management and system release governance for regulated applications.
Influence across the Cyber Security Office to shape risk management solutions.
Lead the team in using approved AI tools with responsible use.