Director - Risk Detection & Response

About the role

The Director, Risk Detection & Response leads and operationally runs the Risk Detection & Response function within GSK's Risk Operations Centre, directing a multi-disciplinary team that identifies and evaluates technology risk across GSK's business systems and infrastructure, sites, suppliers and people.

What you'll do

• Direct the team's assurance activity over control design attestations and evidence submitted by Digital & Tech product teams as they navigate the SDLC and compliance…
• Own the Third-Party Cyber Risk Management programme, including upfront and periodic supplier risk assessments, governance of cyber contractual schedules
• Lead Internal Controls Assurance, the team's self-auditing service providing independent assurance over the effectiveness of GRC processes
• Direct the build-out of capability to monitor the operating effectiveness of controls for applications and systems
• Own the security assessment process for desktop software published to the end-user software portal, and the end-user policy exceptions process (e.g. USB blocking

What you need

• Operational risk
• Risk management
• Compliance
• Internal controls
• Six Sigma
• IAM

Good to have

• Internal audit
• Power BI
• ISO 27001
• CISA
• CISSP
• ServiceNow