Associate Director - Systems Risk

About the role

The Associate Director, Systems Risk leads the application and systems risk capability within GSK's Risk Operations Centre, reporting to the Director, Risk Detection & Response. This role builds continuous control monitoring of applications and systems to assess control operating effectiveness and provide risk assurance, grounded in a deep understanding of the evolving threat landscape and the business context and architecture of GSK's critical systems.

What you'll do

• Build and run continuous control monitoring across applications and systems to provide ongoing visibility into control operating effectiveness
• Assess risk and provide assurance over application and system controls, informing risk treatment and prioritisation decisions
• Lead ad hoc, detailed risk assessments of applications and systems, acting as subject matter expert on systems and application security and controls
• Advise system and application owners on the controls their systems require and the risk they carry
• Maintain the system risk register and keep it current as the estate changes

What you need

• Internal controls
• Risk management
• Compliance
• IAM
• Cloud security
• Vulnerability assessment
• Any graduate

Good to have

• Data analysis
• ISO 27001
• OWASP
• CISA
• CISM
• CISSP