Senior Director, Risk Automation & Intelligence

GSK • Philadelphia, PA

1d • $195,000 - $325,000

About The Position

The Senior Director, Risk Automation & Intelligence leads the strategy and execution of data, analytics, and automation capabilities that Technology Risk and Compliance relies on to manage risk and demonstrate compliance effectively and efficiently. This senior leadership role is accountable across GSK for the capability’s policy, processes, automation and tooling, training, and end-user experience. The Risk Automation and Intelligence team operates as GSK’s Risk Operations Centre, building analytics, automation, and intelligence to help GSK proactively manage technology risk and compliance at scale.

Requirements

• Bachelor’s degree.
• Experience in risk analytics, automation, or security data science.
• Experience building AI and intelligent automation solutions.
• Product management experience, including Agile delivery methods and translating stakeholder requirements into a prioritised roadmap.
• Experience applying Lean Six Sigma or other process excellence methodologies.
• Experience delivering data platforms and data pipelines.
• Experience leading a technical capability.
• Cyber security experience, including leading a global capability.
• Experience managing people leaders across multiple geographies.
• Experience managing a capability budget and vendor portfolio.
• Experience with quantitative risk analysis and statistical methods.
• Experience presenting to executive leadership or board-level audiences.

Nice To Haves

• Experience leading a data, analytics, or automation capability.
• Experience with cyber risk quantification methods and related quantitative risk analysis techniques.
• Familiarity with modern Risk Operations Centre concepts and operating models.
• Experience with continuous controls monitoring.
• Familiarity with modern GRC platforms, especially ServiceNow.
• Cloud data platform experience in Azure, AWS, or GCP.
• Relevant certification such as CRISC, CISSP, or cloud data or analytics certifications.
• Experience in pharmaceutical, life sciences, or another highly regulated industry.

Responsibilities

• Set the enterprise vision and multi-year strategy for Technology Risk and Compliance data, analytics, and automation capabilities, and secure investment to deliver it.
• Lead the Risk Automation & Intelligence organisation, including its team leaders, and own the capability plan.
• Own the capability budget, vendor portfolio, and headcount plan.
• Represent the capability to the CISO, GSK Tech leadership, auditors, and regulators.
• Own GSK’s Cyber Security Policies and keep them current, practical, and aligned with changes in threats, technology, and regulation.
• Own Technology Risk and Compliance processes across GSK, ensuring they are well-designed, consistently applied, and continuously improved.
• Own integration between Technology Risk and Compliance and GSK’s Enterprise Risk Programme, ensuring technology risk is represented accurately and consistently in enterprise risk reporting and governance.
• Operate and evolve GSK’s Risk Operations Centre model, incorporating modern ROC concepts, continuous controls monitoring, and quantitative risk analysis.
• Apply product management discipline to the risk and compliance tooling roadmap, translating senior stakeholder needs into prioritised features and releases.
• Build and lead the capability that automates risk, control, and compliance processes, including AI and intelligent automation.
• Develop risk analytics, models, and quantitative risk methods to help the business identify, evaluate, and treat cyber risk and inform leadership, ExCom, and Board prioritisation and investment decisions.
• Develop performance analytics to measure the effectiveness and operational efficiency of the Technology Risk and Compliance programme and drive continuous improvement.
• Own the data platform and pipelines supporting risk intelligence, including tools for Board-level Key Risk Indicators, issue and risk management, third-party cyber risk management, and software development lifecycle compliance.
• Own the GRC tooling strategy, including ServiceNow, and ensure platforms used across GSK for risk and compliance management are modern, well-integrated, and fit for purpose.
• Introduce innovative approaches to instrumenting and automating risk and compliance, challenging existing practices to improve outcomes and reduce manual effort.
• Lead the team’s use of approved AI tools to improve productivity and ways of working, modelling responsible use and adherence to GSK Responsible AI, privacy, and security requirements.

Benefits

• Annual bonus.
• Eligibility to participate in a share-based long-term incentive program, dependent on role level.
• Health care and other insurance benefits for employees and family.
• Retirement benefits.
• Paid holidays.
• Vacation.
• Paid caregiver, parental, and medical leave.

What This Job Offers

• Job Type: Full-time
• Career Level: Director