Senior Director, Risk Automation & Intelligence

GSK • Philadelphia, PA

3d

About The Position

The Senior Director, Risk Automation & Intelligence leads the strategy and execution of the data, analytics, and automation capabilities that support GSK’s Technology Risk and Compliance function. This senior leadership role is accountable across GSK for the capabilities’ policy, processes, automation and tooling, training, and end-user experience. The Risk Automation and Intelligence team operates as GSK’s Risk Operations Centre, building analytics, automation, and intelligence to help the company manage technology risk and compliance proactively and at scale.

The role sets the enterprise vision and multi-year strategy, secures investment, leads the organization and its capability plan, and owns its budget, vendor portfolio, and headcount plan. It represents the capability to the CISO, GSK Technology leadership, auditors, and regulators. The position also owns GSK’s Cyber Security Policies, Technology Risk and Compliance processes, integration with the Enterprise Risk Programme, risk and compliance tooling roadmap, data platform and pipelines, and GRC tooling strategy, including ServiceNow.

The Senior Director develops automation, AI, risk analytics, quantitative risk methods, and performance analytics to replace manual work, help identify and prioritize cyber risk, inform resource and investment decisions, and continuously improve the programme. The role leads the team in using approved AI tools responsibly and in accordance with GSK’s Responsible AI, privacy, and security requirements.

Requirements

• Bachelor’s degree.
• Experience in risk analytics, automation, or security data science.
• Experience building AI and intelligent automation solutions.
• Product management experience, including Agile delivery methods and translating stakeholder requirements into a prioritized roadmap.
• Experience applying Lean Six Sigma or other process excellence methodologies.
• Experience delivering data platforms and data pipelines.
• Experience leading a technical capability.
• Cybersecurity experience, including leading a global capability.
• Experience managing people leaders across multiple geographies.
• Experience managing a capability budget and vendor portfolio.
• Experience with quantitative risk analysis and statistical methods.
• Experience presenting to executive leadership or board-level audiences.

Nice To Haves

• Experience leading a data, analytics, or automation capability.
• Experience with cyber risk quantification methods and associated quantitative risk analysis techniques.
• Familiarity with modern Risk Operations Centre (ROC) concepts and operating models.
• Experience with continuous controls monitoring.
• Familiarity with modern GRC platforms, especially ServiceNow.
• Cloud data platform experience in Azure, AWS, or GCP.
• Relevant certification such as CRISC, CISSP, or cloud data or analytics certifications.
• Experience in pharmaceutical, life sciences, or another highly regulated industry.

Responsibilities

• Set the enterprise vision and multi-year strategy for data, analytics, and automation capabilities supporting Technology Risk and Compliance, and secure the investment to deliver it.
• Lead the Risk Automation & Intelligence organization, including team leaders, and own its capability plan.
• Own the capability budget, vendor portfolio, and headcount plan.
• Represent the capability to the CISO, GSK Technology leadership, auditors, and regulators.
• Own GSK’s Cyber Security Policies and keep them current, practical, and aligned with evolving threats, technology, and regulation.
• Own Technology Risk and Compliance processes across GSK, ensuring they are well-designed, consistently applied, and continuously improved.
• Own integration between Technology Risk and Compliance and GSK’s Enterprise Risk Programme, ensuring technology risk is represented accurately and consistently in enterprise risk reporting and governance.
• Operate and evolve GSK’s Risk Operations Centre model, incorporating modern ROC concepts, continuous controls monitoring, and quantitative risk analysis.
• Apply product management rigour to the risk and compliance tooling roadmap, translating senior stakeholder needs into prioritized features and releases.
• Build and lead the capability that automates risk, control, and compliance processes, including AI and intelligent automation.
• Develop risk analytics, models, and quantitative risk methods to help the business identify, evaluate, and treat cyber risk, and to support prioritization and leadership investment decisions.
• Develop performance analytics to measure the effectiveness and operational efficiency of the Technology Risk and Compliance programme.
• Own the data platform and pipelines supporting risk intelligence, including tooling for Board-level Key Risk Indicators, issue and risk management, third-party cyber risk management, and software development lifecycle compliance.
• Own the GRC tooling strategy, including ServiceNow, ensuring GSK’s risk and compliance platforms are modern, integrated, and fit for purpose.
• Challenge existing approaches and introduce innovative ways to instrument and automate risk and compliance with less manual effort.
• Lead the team in using approved AI tools to improve productivity and ways of working, role-modelling responsible use and complying with GSK’s Responsible AI, privacy, and security requirements.

Benefits

• Annual bonus.
• Eligibility to participate in a share-based long-term incentive program, dependent on role level.
• Health care and other insurance benefits for employees and families.
• Retirement benefits.
• Paid holidays.
• Vacation.
• Paid caregiver, parental, and medical leave.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior