Senior Director, Technology Risk & Compliance – Enterprise Systems

GSK

. Set the multi-year strategy for the Technology Risk & Compliance Business Partners – Enterprise Systems capability and secure investment .

Posted 10/23/2026full-timeLondon • United KingdomSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cyber risk management and compliance within enterprise systems, including budget ownership and vendor portfolio management. Proven ability to influence stakeholders and lead teams across multiple geographies in a regulated industry context.

Highest-signal resume keywords

Cyber Risk ManagementTechnology Risk GovernanceBudget OwnershipStakeholder EngagementGxP Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk AssessmentRisk Register ManagementCyber SecurityProcess Improvement MethodologiesService Definition

Soft Skills

Influencing SkillsCommunication Skills

Tools & Technologies

SAPWorkdaySalesforceServiceNow

Certifications & Qualifications

CISMCRISCCISACISSP

Industry Keywords

Pharmaceutical IndustryRegulated IndustryGxPSOX ComplianceNIST CSFISO 27001ISO 22301

Tech Stack

Tools & technologies

Cyber SecurityServiceNow

About the role

Key responsibilities & impact

Set the multi-year strategy for the Technology Risk & Compliance Business Partners – Enterprise Systems capability and secure investment
Drive a risk-accountable leadership culture and cyber- and risk-savvy workforce culture in Enterprise Systems
Lead the Technology Risk & Compliance Business Partners – Enterprise Systems organisation and own its capability plan
Own the budget, vendor portfolio and headcount plan
Represent the capability to the CISO, GSK Tech leadership, auditors and regulators
Own the cyber risk and compliance relationship for enterprise systems, including finance, HR and core corporate platforms
Identify, analyse and influence management of cyber security risk across the assigned area
Hold operational areas, risk owners and suppliers accountable to Cyber Security Office strategy
Build and maintain the cyber risk register, including risk statements, ratings, owners and treatment plans
Develop understanding of Enterprise Systems processes and technologies, including SAP, Workday and Salesforce, and advise leadership on changing technology, threat and regulatory landscapes
Own the Risk & Compliance governance forum, tracking priority actions, findings and CAPAs
Partner with Business Quality Assurance on GxP validation of business-facing applications and services
Oversee and coach the team on audit and inspection readiness, external inspections, regulator/auditor engagements and CAPA reporting
Oversee and coach the team on GxP software change management and release governance for regulated applications
Influence the Cyber Security Office and broader Digital and Tech organisation to shape effective risk and compliance solutions

Requirements

What you’ll need

Degree in a relevant discipline, or related experience
Demonstrated experience in cyber risk, technology risk or information security governance
Working knowledge of risk assessment and risk register management
Practical experience with senior business stakeholder engagement
Extensive experience in cyber security, including leading a global capability at scale
Proven experience leading leaders of teams across multiple geographies
Demonstrated ownership of a capability budget and vendor portfolio
Excellent influencing and communication skills at executive and board level
Experience with service definition and process improvement methodologies
Preferred: experience acting as a business information security officer or embedded security partner
Preferred: working knowledge of NIST CSF, ISO 27001 and ISO 22301
Preferred: experience with GRC platforms such as ServiceNow
Preferred: experience in pharmaceutical or another regulated industry, including GxP and SOX contexts
Preferred: ability to influence senior stakeholders without direct authority
Preferred: relevant certification such as CISM, CRISC, CISA, CISSP
Preferred: experience in pharmaceutical, life sciences or another highly regulated industry
Preferred: solid understanding of SOX compliance requirements and internal controls over financial reporting

Benefits

Comp & perks

Hybrid working model with 2/3 days a week onsite at the central London HQ
Agile working culture and flexibility opportunities
Equal opportunity employment
Adjustments and support available during the recruitment process