Senior Director, Technology Risk & Compliance Business Partners

GSK

. Set the multi-year strategy for Technology Risk & Compliance Business Partners - GSC & OT and secure investment to deliver it .

Posted 10/26/2026full-timeUpper Providence • Pennsylvania • United StatesSenior💰 $195,000 - $325,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Cyber Risk Management, Technology Risk Governance, and Compliance within Global Supply Chain and Operational Technology. Proven ability to influence stakeholders, manage budgets, and lead cross-functional teams in regulated environments.

Highest-signal resume keywords

Cyber Risk ManagementTechnology Risk GovernanceGRC Platforms ManagementStakeholder EngagementRegulatory Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk AssessmentRisk Register ManagementCyber SecurityService DefinitionProcess Improvement MethodologiesOperational Technology SecurityGxP ComplianceSarbanes Oxley ComplianceVendor Portfolio ManagementBudget Management

Soft Skills

Influencing Without AuthorityLeadershipCommunication

Tools & Technologies

ServiceNow GRCPower BINIST CSFISO 27001ISO 22301

Certifications & Qualifications

CISMCRISCCISACISSP

Industry Keywords

Pharmaceutical IndustryRegulated IndustryGxPSOXCyber Security Office

Tech Stack

Tools & technologies

Cyber SecurityServiceNow

About the role

Key responsibilities & impact

Set the multi-year strategy for Technology Risk & Compliance Business Partners - GSC & OT and secure investment to deliver it
Drive a risk-accountable leadership culture and cyber- and risk-savvy workforce culture in Global Supply Chain and Operational Technology
Lead the Technology Risk & Compliance Business Partners - GSC & OT organisation and own its capability plan
Own the budget, vendor portfolio and headcount plan
Represent the capability to the CISO, GSK Tech leadership, auditors and regulators
Support risk and compliance for Sarbanes Oxley, privacy regulations and anti-bribery and corruption
Own the cyber risk and compliance relationship for Global Supply Chain and Operational Technology
Identify, analyse and influence cyber security risk management
Hold operational areas, risk owners and suppliers accountable to Cyber Security Office strategy
Build and maintain the cyber risk register, including risk statements, ratings, owners and treatment plans
Develop understanding of Global Supply Chain processes and supporting IT and OT ecosystems
Guide leadership on technology, threat and regulatory landscape impacts
Own the Risk & Compliance governance forum and track priority actions, findings and CAPAs
Partner with Business Quality Assurance on GxP validation
Oversee and coach audit and inspection readiness, external inspections, regulator/auditor engagements and CAPA reporting
Oversee and coach GxP software change management and release governance
Influence the Cyber Security Office and broader Digital and Tech organisation on risk and compliance solutions
Lead responsible use of approved AI tools to improve productivity and ways of working

Requirements

What you’ll need

Degree in a relevant discipline, or related experience
Experience in cyber risk, technology risk or information security governance
Experience with risk assessment and risk register management
Experience engaging with senior business stakeholders
Experience in cyber security, including leading a global capability at scale
Experience leading leaders of teams across multiple geographies
Experience owning a capability budget and vendor portfolio
Experience influencing and communicating at executive and board level
Experience with service definition and process improvement methodologies
Experience acting as a business information security officer or embedded security partner
Working knowledge of NIST CSF, ISO 27001 and ISO 22301
Experience with GRC platforms such as ServiceNow
Experience in pharmaceutical or another regulated industry, including GxP and SOX contexts
Ability to influence senior stakeholders without direct authority
Relevant certification such as CISM, CRISC, CISA, CISSP
Understanding of Operational Technology security concepts across manufacturing, distribution, quality laboratory and supply chain environments
Knowledge of ServiceNow GRC and Power BI

Benefits

Comp & perks

Annual bonus
Eligibility to participate in a share based long term incentive program
Health care and other insurance benefits for employee and family
Retirement benefits
Paid holidays
Vacation
Paid caregiver/parental and medical leave
Comprehensive benefits program
Accommodation or other assistance to apply for a job