Director, Compliance Operations

GSK • Philadelphia, PA

3d • $156,750 - $261,250

About The Position

The Director, Compliance Operations leads and operationally runs the Compliance Operations function within GSK's Risk Operations Centre. The role directs the team responsible for GSK's IT control SOX testing and SOX compliance, License Compliance and Software Asset Management, and compliance consulting and assurance for the Technology organisation across Privacy, Sanctions, and Anti-Bribery and Corruption requirements.

The position also performs Business Operations for the Technology Risk and Compliance organisation, including budget and financial management, headcount, annual goals and objectives, culture and engagement, and special projects. It is an operational execution and process subject-matter-expert role accountable for effective and efficient service delivery, continuous improvement, and intelligent automation.

Compliance Operations is part of GSK's Risk Operations Centre. The team runs GSK's SOX ITGC testing programme, owns License Compliance and Software Asset Management, provides compliance consulting and assurance to the Technology organisation, and performs business operations for the wider Technology Risk and Compliance organisation.

Requirements

• Bachelor's degree.
• Experience in Sarbanes-Oxley (SOX) compliance, information technology audit, or control testing.
• Experience applying SOX information technology general controls frameworks and evidence standards.
• Experience in software asset management and license compliance.
• Experience managing compliance operations with end-to-end ownership of a capability.
• Experience leading and developing teams and managing budgets and headcount.
• Experience managing organisational goal-setting, performance tracking, culture, or engagement processes.
• Experience influencing and communicating with senior stakeholders.

Nice To Haves

• Experience with Privacy, Sanctions, or Anti-Bribery and Corruption compliance.
• Working knowledge of software asset management tools and license management practices.
• Experience with GRC tooling such as ServiceNow.
• Experience managing budgets and financial planning for a technology function.
• Relevant certification such as CISA, CPA, CIA, CRISC, or a compliance-specific certification such as CCEP.
• Experience in pharmaceutical, life sciences, or another highly regulated industry.

Responsibilities

• Own GSK's IT control SOX testing programme, including scope, test plans, sampling, execution, and evidence to standards acceptable to external auditors.
• Track SOX control deficiencies and management action plans for GSK's technology environment through to closure.
• Own GSK's License Compliance and Software Asset Management programme, ensuring the software estate is accurately inventoried, licensed, and compliant.
• Provide compliance consulting and assurance to the Technology organisation across Privacy, Sanctions, and Anti-Bribery and Corruption requirements, partnering with Privacy, Legal, and Ethics & Compliance teams.
• Perform Business Operations for the Technology Risk and Compliance organisation, managing its budget, finances, and headcount plan.
• Drive the annual goals and objectives process across the Technology Risk and Compliance organisation, including tracking and completion.
• Lead culture-building and engagement activities across the Technology Risk and Compliance organisation.
• Take on special projects on behalf of the VP, Technology Risk and Compliance.
• Set, monitor, and report KPIs on Compliance Operations processes, applying Lean Six Sigma methods to drive measurable continuous improvement.
• Sponsor and prioritise the roadmap for AI agents and intelligent automation to improve process efficiency and effectiveness.
• Act as the function's escalation point with Cyber Security Office and GRC stakeholders globally, representing Compliance Operations in cross-functional risk and compliance governance forums.
• Lead the team in using approved AI tools to improve productivity and ways of working, modelling responsible use and following GSK's Responsible AI, privacy, and security requirements.

Benefits

• Annual bonus.
• Eligibility to participate in a share-based long-term incentive program, dependent on role level.
• Health care and other insurance benefits for employees and family.
• Retirement benefits.
• Paid holidays.
• Vacation.
• Paid caregiver, parental, and medical leave.

What This Job Offers

• Job Type: Full-time
• Career Level: Director