Senior Director, Risk & Compliance Business Partners R&D

What you'll do

• Set the capability’s multi-year strategy and manage its budget, vendors, headcount, and capability plan.
• Lead the organization and build risk-aware cultures, while representing the capability to senior leaders, auditors, and regulators.
• Oversee R&D cyber risk registers, governance, audit readiness, GxP validation, and regulated software change and release governance.

What they ask for

• Bachelor's degree.
• Experience in cyber risk, technology risk, or information security governance, including conducting risk assessments and managing risk registers.
• Experience in cybersecurity, including leading a global capability, and leading people managers across multiple geographies.
• Experience managing a capability budget and vendor portfolio; applying service definition and process improvement methodologies; and engaging senior stakeholders at executive and board level.

Nice to have

• Experience as a business information security officer or embedded security partner; working knowledge of NIST CSF, ISO 27001, ISO 22301, or GRC platforms such as ServiceNow.
• Experience in pharmaceutical or another regulated industry, including GxP and SOX; relevant certification such as CISM, CRISC, CISA, CISSP; or OT security knowledge.

Pay

USD $195,000 to $325,000 (annual base salary)

Tools

NIST CSF, ISO 27001, ISO 22301, ServiceNow, ServiceNow GRC, Power BI

AI focus

Lead the team in using approved AI tools to improve productivity and ways of working, modeling responsible use and following GSK’s Responsible AI, privacy, and security requirements.