Associate Director - IAM Operations and Governance

GSK remains committed to achieving bold commercial ambitions for the future. By 2031, we aim to deliver £40 billion in annual sales, leveraging our existing strong performance momentum to significantly increase our positive impact on the health of billions of patients globally. Our Ahead Together strategy is centred on early intervention to prevent and alter the course of disease, thereby protecting people and supporting healthcare systems. Our diverse portfolio consists of vaccines, specialty medicines, and general medicines. Through continuous innovation and a dedicated focus on scientific and technical excellence, we strive to develop and launch new, groundbreaking treatments that address critical health challenges. Job Purpose : The Associate Director, IAM Operations and Governance will lead the team responsible for IAM audit controls and compliance governance across the identity estate. This hands-on role will set direction, translate strategy into an executable roadmap, assign clear ownership, remove delivery barriers and ensure commitments are completed to the required quality and timelines. The role will design and operate a modern, automated IAM control environment for SOX, GxP and other regulatory obligations, including continuous monitoring, evidence collection, control-to-evidence traceability, findings management and sustainable remediation. It will also lead the adoption of agentic AI and workflow automation to reduce manual effort, improve control effectiveness and provide audit-ready assurance. About the team: IAM Operations and Governance owns the control layer over GSK's identity estate: access certification, segregation of duties, identity risk reporting and the audit evidence that proves access is under control. Key responsibilities: This role will provide you the opportunity to lead key initiatives:    • Lead the IAM controls, audit assurance and compliance governance capability, including its people, operating model, roadmap, delivery and outcomes; set clear priorities, delegate effectively and hold the team accountable for execution. • Own the IAM control framework for SOX, GxP and other applicable regulatory and enterprise requirements, ensuring clear control objectives, ownership, frequency, procedures and accountability. • Establish continuous controls monitoring across joiner, mover and leaver processes, access approvals, access certification, segregation of duties, privileged access, service accounts, orphaned accounts and excessive or stale access. • Design and implement an automated control library that maps each control to its policy and regulatory requirement, systems in scope, control owner, required evidence, test procedure, exception criteria and remediation workflow. • Apply Agentic AI and workflow automation to collect and validate evidence, detect control failures, identify missing or inconsistent artefacts, maintain traceability and initiate risk-based remediation with appropriate human oversight. • Define safeguards for AI-enabled controls, including data protection, model governance, explainability, access restrictions, validation, audit logging, exception handling and human approval for material decisions. • Lead internal and external IAM audits from planning through closure, ensuring that evidence is complete, accurate and timely, and serve as the principal liaison for auditors, Quality, Risk, Finance, Legal and control owners. • Own findings, deficiencies and corrective and preventive actions, including root-cause analysis, risk assessment, accountable owners, target dates, validation of closure and prevention of recurrence. • Define key control indicators, compliance dashboards and executive reporting covering control effectiveness, evidence completeness, exceptions, ag