[Hiring] Senior Director, Risk & Compliance Business Partners R&D @GSK

Role Description

The Senior Director, Risk & Compliance Business Partners R&D will set direction for the Risk & Compliance Business Partners R&D capability across GSK and lead the organisation that delivers it. This is a senior leadership role accountable for the capability across GSK. This role covers GSK Research and Development, including clinical, discovery and regulatory technology.

Key responsibilities:

• Set the multi-year strategy for Risk & Compliance Business Partners R&D and secure the investment to deliver it.
• Drive a risk-accountable leadership culture and a cyber- and risk-savvy workforce culture in R&D.
• Lead the Risk & Compliance Business Partners R&D organisation, including leaders of teams, and own its capability plan.
• Own the budget, vendor portfolio and headcount plan for the capability.
• Represent the capability to the CISO, GSK Tech leadership, auditors and regulators.
• Own the cyber risk and compliance relationship for the assigned area, GSK Research and Development, including clinical, discovery and regulatory technology.
• Develop a deep understanding of Research and Development business processes and strategic business priorities, and guide R&D leadership on how the changing technology, threat and regulatory landscapes affect their risk posture.
• Influence across the Cyber Security Office and broader Digital and Tech organisation to identify and shape solutions for effective and efficient risk and compliance management.
• Build and maintain the cyber risk register for the area, including risk statements, ratings, owners and treatment plans.
• Own the Risk & Compliance governance forum (RMCB) for the assigned area, ensuring priority actions, findings and CAPAs are tracked with clear accountabilities.
• Partner with Business Quality Assurance to ensure GxP validation of business-facing application systems and services within the assigned area.
• Provide oversight and coaching to the team on audit and inspection readiness, including hosting of external inspections and regulator/auditor engagements, and on the reporting of CAPA status.
• Provide oversight and coaching to the team on GxP software change management and system release governance for regulated applications within the assigned area.
• Lead your team in using approved AI tools to improve productivity and ways of working, role-modelling responsible use and follow GSK’s Responsible AI, privacy and security requirements.

Qualifications

• Bachelor's degree.
• Experience in cyber risk, technology risk, or information security governance.
• Experience conducting risk assessments and managing risk registers.
• Experience in cyber security, including leading a global capability.
• Experience leading people managers across multiple geographies.
• Experience managing a capability budget and vendor portfolio.
• Experience applying service definition and process improvement methodologies.
• Experience engaging senior business stakeholders.
• Influencing and communication skills at executive and board level.

Requirements

• Experience acting as a business information security officer or embedded security partner.
• Working knowledge of NIST CSF, ISO 27001 and ISO 22301.
• Experience with GRC platforms such as ServiceNow.
• Experience in pharmaceutical or another regulated industry, including GxP and SOX contexts.
• Ability to influence senior stakeholders without direct authority.
• Relevant certification such as CISM, CRISC, CISA, CISSP.
• Experience in pharmaceutical, life sciences or another highly regulated industry.
• Understanding of Operational Technology (OT) security concepts, ideally applied to a laboratory setting.
• Typical tools and technologies: ServiceNow GRC, Power BI.

Benefits

• The US annual base salary for new hires in this position ranges from $195,000 to $325,000.
• This position offers an annual bonus and eligibility to participate in our share based long term incentive program.
• Available benefits include health care and other insurance benefits (for employee and family).
• Retirement benefits, paid holidays, vacation, and paid caregiver/parental and medical leave.