Director, Compliance Operations

Business Introduction
GSK remains committed to achieving bold commercial ambitions for the future. By 2031, we aim to deliver £40 billion in annual sales, leveraging our existing strong performance momentum to significantly increase our positive impact on the health of billions of patients globally. Our Ahead Together strategy is centred on early intervention to prevent and alter the course of disease, thereby protecting people and supporting healthcare systems.
Our diverse portfolio consists of vaccines, specialty medicines, and general medicines.
Through continuous innovation and a dedicated focus on scientific and technical excellence, we strive to develop and launch new, groundbreaking treatments that address critical health challenges.

The Director, Compliance Operations leads and operationally runs the Compliance Operations function within GSK's Risk Operations Centre, directing the team that owns IT control SOX testing and SOX compliance for GSK, GSK's License Compliance and Software Asset Management programme, and provides compliance consulting and assurance for the Technology organisation across Privacy, Sanctions and Anti-Bribery and Corruption requirements. This role also performs the Business Operations function for the Technology Risk and Compliance organisation, managing budget and finances, headcount, the annual goals and objectives process, culture and engagement, and special projects. This is both an operational execution and process subject-matter-expert role, accountable for the operational effectiveness and efficiency of these services and for driving continuous improvement and intelligent automation.

About the team. Compliance Operations is part of GSK's Risk Operations Centre. The team runs GSK's SOX ITGC testing programme, owns License Compliance and Software Asset Management, provides Privacy, Sanctions and Anti-Bribery and Corruption compliance consulting and assurance to the Technology organisation, and performs the Business Operations function -- budget, headcount, goals and objectives, and culture and engagement -- for the wider Technology Risk and Compliance organisation.

Key responsibilities:

This role will provide you the opportunity to lead key activities to progress your career. These responsibilities include some of the following:

• Own GSK's IT control SOX testing programme, including scope, test plans, sampling, execution and evidence to a standard that external auditors will accept.

• Track SOX control deficiencies and management action plans for GSK's technology environment through to closure.

• Own GSK's License Compliance and Software Asset Management programme, ensuring GSK's software estate is accurately inventoried, licensed and compliant.

• Provide compliance consulting and assurance to the Technology organisation across Privacy, Sanctions and Anti-Bribery and Corruption requirements, partnering with GSK's Privacy, Legal and Ethics & Compliance teams.

• Perform the Business Operations function for the Technology Risk and Compliance organisation, managing its budget, finances and headcount plan.

• Drive the annual goals and objectives process across the Technology Risk and Compliance organisation, including tracking and completion.

• Lead culture-building and engagement activities across the Technology Risk and Compliance organisation.

• Take on special projects on behalf of the VP, Technology Risk and Compliance.

• Set, monitor and report KPIs on the effectiveness and efficiency of Compliance Operations processes, applying Lean Six Sigma methods to drive continuous, measurable improvement.

• Sponsor and prioritise the roadmap for AI agents and intelligent automation that increase the efficiency and effectiveness of the team's processes.

• Act as the escalation point for the function with Cyber Security Office and GRC stakeholders globally, representing Compliance Operations in cross-functional risk and compliance governance forums.

• Lead your team in using approved AI tools to improve productivity and ways of working, role-modelling responsible use and follow GSK’s Responsible AI, privacy and security requirements.

Why You?
Basic Qualifications
We are seeking professionals with the following required skills and qualifications to help us achieve our goals:
Bachelor’s degree.

• Experience in Sarbanes-Oxley (SOX) compliance, information technology audit or control testing.
• Experience applying Sarbanes-Oxley (SOX) information technology general controls frameworks and evidence standards.
• Experience in software asset management and license compliance.
• Experience managing compliance operations with end-to-end ownership of a capability.
• Experience leading and developing teams and managing budgets and headcount.
• Experience managing organisational goal-setting, performance tracking, culture or engagement processes.
• Experience influencing and communicating with senior stakeholders

Preferred Qualifications
If you have the following characteristics, it would be a plus:

…