Senior Manager, Site Risk

Senior Manager, Site Risk Business Introduction GSK remains committed to achieving bold commercial ambitions for the future. By 2031, we aim to deliver £40 billion in annual sales, leveraging our existing strong performance momentum to significantly increase our positive impact on the health of billions of patients globally. Our Ahead Together strategy is centred on early intervention to prevent and alter the course of disease, thereby protecting people and supporting healthcare systems. Our diverse portfolio consists of vaccines, specialty medicines, and general medicines. Through continuous innovation and a dedicated focus on scientific and technical excellence, we strive to develop and launch new, groundbreaking treatments that address critical health challenges. Job Purpose The Senior Manager, Site Risk leads the site and OT risk monitoring, indexing and automation capability that supports GSK's business-facing Technology Risk and Compliance teams across R&D labs and Supply Chain sites, providing continuous visibility into the assets, threats, risks and control effectiveness operating in those environments. This is a delivery leadership role combining hands-on work with team and stakeholder management. About the team. Site Risk provides the continuous monitoring, risk indexing and automation that GSK's business-facing Technology Risk and Compliance teams rely on to understand and manage cyber exposure at GSK's physical sites: the manufacturing plants, laboratories and R&D campuses where IT and operational technology meet. This position builds the risk intelligence, data and visibility that enables risk and compliance conversations with site leadership. Key responsibilities: This role will provide you the opportunity to lead key activities to progress your career. These responsibilities include some of the following: • Lead a defined area of the capability, including its people, delivery and outcomes. • Develop team capability through coaching, review and structured feedback. • Represent the area in CSO governance and cross-functional forums. • Build and maintain a deep understanding of the assets, threat intelligence, risks and controls operating across R&D labs and Supply Chain sites, spanning both IT and OT. • Build and run continuous control monitoring across sites to provide ongoing visibility into control operating effectiveness across IT and OT, synthesizing asset understanding and threat intelligence to provide a holistic and continuous view of risk. • Own and govern the Site Cyber Risk Index model, ensuring it accurately reflects site risk posture, is trusted by stakeholders and clearly recommends prioritized actions. • Build out key risk and performance indicators, and automation, to help business-facing Technology Risk and Compliance teams drive and track action and remediation at their sites. • Partner with the business partnering teams who own the site risk and compliance relationship, providing them with the data, indices and tooling they need to engage site leadership effectively. • Perform ad hoc risk assessments across sites as needed. • Engage cyber defence and cyber architecture and solutions teams to commission services such as penetration testing and detailed architectural reviews. • Partner with OT engineering teams to understand the operating environment of the technology being assessed. • Partner with the Risk Intelligence and Decision Support team on gathering and visualising site risk data. • Track site remediation through to closure and escalate where sites do not act. Why you? We are looking for professionals with the following required skills to achieve our goals: Basic Qualifications: • Degree in a relevant discipline, or related experience. • Demonstrated experience in technolo