Director - Risk Detection & Response

GSK remains committed to achieving bold commercial ambitions for the future. By 2031, we aim to deliver £40 billion in annual sales, leveraging our existing strong performance momentum to significantly increase our positive impact on the health of billions of patients globally. Our Ahead Together strategy is centred on early intervention to prevent and alter the course of disease, thereby protecting people and supporting healthcare systems. Our diverse portfolio consists of vaccines, specialty medicines, and general medicines. Through continuous innovation and a dedicated focus on scientific and technical excellence, we strive to develop and launch new, groundbreaking treatments that address critical health challenges. Job Purpose : The Director, Risk Detection & Response leads and operationally runs the Risk Detection & Response function within GSK's Risk Operations Centre, directing a multi-disciplinary team that identifies and evaluates technology risk across GSK's business systems and infrastructure, sites, suppliers and people. The role gathers data on assets and threats, and assesses control design and operating effectiveness in that context.  It also manages the end-user policy exceptions and workstation software risk assessment processes.  The role oversees Internal Controls Assurance, which proactively monitors the effectiveness of GSK's internal governance and control processes. This is both an operational execution and process subject-matter-expert role, accountable for the operational effectiveness and efficiency of these services and for driving continuous improvement and intelligent automation. About the team : Risk Detection and Response is part of GSK's Risk Operations Centre. The team gathers data and evidence across GSK's systems, sites, suppliers and people to assess whether controls are well-designed and operating effectively, manages third-party cyber risk, end-user policy exceptions and workstation software risk, and runs Internal Controls Assurance, GSK's own self-auditing service over the effectiveness of governance and control processes. Key responsibilities: This role will provide you the opportunity to lead key activities to progress your career. These responsibilities include some of the following: • Own end-to-end delivery of systemic on-going and ad hoc risk assessment across GSK's systems, sites, suppliers and people, including technical evaluation of control effectiveness and scoring of risk against the enterprise risk management rubric for impact and likelihood. • Direct the team's assurance activity over control design attestations and evidence submitted by Digital & Tech product teams as they navigate the SDLC and compliance requirements. • Own the Third-Party Cyber Risk Management programme, including upfront and periodic supplier risk assessments, governance of cyber contractual schedules, procurement redline support and mitigating control recommendations. • Lead Internal Controls Assurance, the team's self-auditing service providing independent assurance over the effectiveness of GRC processes. • Direct the build-out of capability to monitor the operating effectiveness of controls for applications and systems, and site-level Operational Technology controls across Supply Chain (manufacturing, logistics, quality labs) and R&D labs. • Own the security assessment process for desktop software published to the end-user software portal, and the end-user policy exceptions process (e.g. USB blocking, web filtering, local admin). • Manage, develop and resource-plan the team across its Systems Risk, Supplier Risk and Site/OT Risk pillars, including sourcing and directing vendor augmentation for project surges. • Set, monitor and report KPIs on the effectiveness and efficiency of Risk Dete