Senior Director, Risk Automation & Intelligence

Business Introduction
GSK remains committed to achieving bold commercial ambitions for the future. By 2031, we aim to deliver £40 billion in annual sales, leveraging our existing strong performance momentum to significantly increase our positive impact on the health of billions of patients globally. Our Ahead Together strategy is centred on early intervention to prevent and alter the course of disease, thereby protecting people and supporting healthcare systems.
Our diverse portfolio consists of vaccines, specialty medicines, and general medicines.
Through continuous innovation and a dedicated focus on scientific and technical excellence, we strive to develop and launch new, groundbreaking treatments that address critical health challenges.

Position Summary
The Senior Director, Risk Automation & Intelligence leads the strategy and execution of the data, analytics and automation capabilities that the rest of the Technology Risk and Compliance function relies on to manage risk and demonstrate compliance effectively and efficiently. This is a senior leadership role accountable for the capability across GSK, spanning policy, process, automation and tooling, training and end-user experience for Technology Risk and Compliance capabilities and services.

About the team. Risk Automation and Intelligence is the engine room of the Risk and Compliance function's data and automation, operating as GSK's Risk Operations Centre. The team builds future-ready analytics, automation and intelligence that enable GSK to manage technology risk and compliance proactively and at scale.

Key responsibilities:

This role will provide you the opportunity to lead key activities to progress your career. These responsibilities include some of the following:

• Set the enterprise vision and multi-year strategy for the data, analytics and automation capabilities that underpin Technology Risk and Compliance at GSK, and secure the investment to deliver it.

• Lead the Risk Automation & Intelligence organisation, including leaders of teams, and own its capability plan.

• Own the budget, vendor portfolio and headcount plan for the capability.

• Represent the capability to the CISO, GSK Tech leadership, auditors and regulators.

• Own GSK's Cyber Security Policies, ensuring they remain current, practical and aligned with the evolving threat, technology and regulatory landscape.

• Own the Technology Risk and Compliance processes used across GSK, ensuring they are well-designed, consistently applied and continuously improved.

• Own the integration between Technology Risk and Compliance and GSK's Enterprise Risk Programme, ensuring technology risk is represented accurately and consistently in enterprise risk reporting and governance.

• Operate and evolve GSK's Risk Operations Centre model, bringing modern Risk Operations Centre concepts, continuous controls monitoring and quantitative risk analysis into how GSK manages technology risk and compliance.

• Bring product management rigour to the roadmap for risk and compliance tooling, translating the needs of stakeholders at Director, VP and SVP level into prioritised features and releases.

• Build and lead the capability that automates risk, control and compliance processes, including AI and intelligent automation, to replace manual effort with proactive, at-scale risk management.

• Develop risk analytics, models and quantitative risk methods that help the business identify, evaluate and treat cyber risk, and that support prioritisation and inform resource and investment decisions for leadership, ExCom and the Board.

• Develop performance analytics that measure the effectiveness and operational efficiency of the Technology Risk and Compliance programme itself, driving continuous improvement.

• Own the data platform and pipelines underpinning risk intelligence, including the tooling used for Board-level Key Risk Indicators, issue and risk management, third-party cyber risk management and software development lifecycle compliance.

• Own the GRC tooling strategy, including ServiceNow, ensuring the platforms used across GSK for risk and compliance management are modern, well-integrated and fit for purpose.

• Bring fresh, innovative thinking to how GSK instruments and automates risk and compliance, challenging existing approaches to deliver superior outcomes with less manual effort.

• Lead your team in using approved AI tools to improve productivity and ways of working, role-modelling responsible use and follow GSK’s Responsible AI, privacy and security requirements.

Why You?
Basic Qualification
We are seeking professionals with the following required skills and qualifications to help us achieve our goals:

• Bachelor’s degree.
• Experience in risk analytics, automation or security data science.
• Experience building AI and intelligent automation solutions.
• Product management experience, including applying Agile delivery methods and translating stakeholder requirements into a prioritised roadmap.
• Experience applying Lean Six Sigma or other process excellence methodologies.
• Experience delivering data platforms and data pipelines.
• Experience leading a technical capability.
• Cyber security experience, including leading a global capability.
• Experience managing people leaders across multiple geographies.
• Experience managing a capability budget and vendor portfolio.
• Experience with quantitative risk analysis and statistical methods.
• Experience presenting to executive leadership or board-level audiences

Preferred Qualification
If you have the following characteristics, it would be a plus:

• Experience leading a data, analytics or automation capability.

• Experience with cyber risk quantification methods and associated quantitative risk analysis techniques.

• Familiarity with modern Risk Operations Centre (ROC) concepts and operating models.

• Experience with continuous controls monitoring.

• Familiarity with modern GRC platforms, especially ServiceNow.

• Cloud data platform experience in Azure, AWS or GCP.

• Relevant certification such as CRISC, CISSP, cloud data or analytics certifications.

• Experience in pharmaceutical, life sciences or another highly regulated industry.

Typical tools and technologies: Python, SQL, Azure data stack, ServiceNow GRC, Power BI, automation, RPA and AI/intelligent automation tooling.

#GSKcso
#Li-GSK

#AGTech

Skills

Cloud Security, Cybersecurity, Data Integrity, Executive Reports, Identity Access Management (IAM), Risk Assessments, Risk Management, Risk Management Framework, Security Architecture Design, Security Compliance, Security Policies, Security Risk, Third Party Risk Management, Vulnerability Management, Web Application SecurityThe US annual base salary for new hires in this position ranges from $195,000 to $325,000. The US salary ranges take into account a number of factors including work location within the US market, the candidate’s skills, experience, education level and the market rate for the role. In addition, this position offers an annual bonus and eligibility to participate in our share based long term incentive program which is dependent on the level of the role. Available benefits include health care and other insurance benefits (for employee and family), retirement benefits, paid holidays, vacation, and paid caregiver/parental and medical leave. If salary ranges are not displayed in the job posting for a specific country, the relevant compensation will be discussed during the recruitment process.

Please visit GSK US Benefits Summary to learn more about the comprehensive benefits program GSK offers US employees.

Why GSK?

Uniting science, technology and talent to get ahead of disease together.

GSK is a global biopharma company with a purpose to unite science, technology and talent to get ahead of disease together. We aim to positively impact the health of 2.5 billion people by the end of the decade, as a successful, growing company where people can thrive. We get ahead of disease by preventing and treating it with innovation in specialty medicines and vaccines. We focus on four therapeutic areas: respiratory, immunology and inflammation; oncology; HIV; and infectious diseases – to impact health at scale.

People and patients around the world count on the medicines and vaccines we make, so we’re committed to creating an environment where our people can thrive and focus on what matters most. Our culture of being ambitious for patients, accountable for impact and doing the right thing is the foundation for how, together, we deliver for patients, shareholders and our people.

If you require an accommodation or other assistance to apply for a job at GSK, please contact the appropriate Recruitment Staff by emailing us at - usrecruitment.adjustments@gsk.com

GSK is an Equal Opportunity Employer. This ensures that all qualified applicants will receive equal consideration for employment without regard to race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), parental status, national origin, age, disability, genetic information (including family medical history), military service or any basis prohibited under federal, state or local law.

Important notice to Employment businesses/ Agencies

GSK does not accept referrals from employment businesses and/or employment agencies in respect of the vacancies posted on this site. All employment businesses/agencies are required to contact GSK's commercial and general procurement/human resources department to obtain prior written authorization before referring any candidates to GSK. The obtaining of prior written authorization is a condition precedent to any agreement (verbal or written) between the employment business/ agency and GSK. In the absence of such written authorization being obtained any actions undertaken by the employment business/agency shall be deemed to have been performed without the consent or contractual agreement of GSK. GSK shall therefore not be liable for any fees arising from such actions or any fees arising from any referrals by employment businesses/agencies in respect of the vacancies posted on this site.

Please note that if you are a US Licensed Healthcare Professional or Healthcare Professional as defined by the laws of the state issuing your license, GSK may be required to capture and report expenses GSK incurs, on your behalf, in the event you are afforded an interview for employment. This capture of applicable transfers of value is necessary to ensure GSK’s compliance to all federal and state US Transparency requirements. For more information, please visit the Centers for Medicare and Medicaid Services (CMS) website at https://openpaymentsdata.cms.gov/