{"id":3337162,"url":"https://alion.io/job/gsk-associate-director-systems-risk","title":"Associate Director - Systems Risk","company":{"id":6649,"name":"GSK","domain":"gsk.com","url":"https://alion.io/company/gsk","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":86,"open_postings":54,"ghost_share":0,"stale_share":0.759,"repost_share":0,"time_to_fill_p50_days":17,"computed_at":"2026-10-30T05:48:23Z"}},"role":"Finance","role_family":"Finance","seniority":"head","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":["IN"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":34000,"max_usd":77000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2969},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"IAM","optional":true},{"name":"ISO 27001","optional":true},{"name":"NIST 800-53","optional":true},{"name":"NIST CSF","optional":true},{"name":"OWASP","optional":true},{"name":"ServiceNow","optional":true}],"status":"live","first_seen_at":"2026-10-27T14:15:46Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-10-30T21:03:05Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"GSK remains committed to achieving bold commercial ambitions for the future. By 2031, we aim to deliver £40 billion in annual sales, leveraging our existing strong performance momentum to significantly increase our positive impact on the health of billions of patients globally. Our Ahead Together strategy is centred on early intervention to prevent and alter the course of disease, thereby protecting people and supporting healthcare systems.\nOur diverse portfolio consists of vaccines, specialty medicines, and general medicines.\nThrough continuous innovation and a dedicated focus on scientific and technical excellence, we strive to develop and launch new, groundbreaking treatments that address critical health challenges.\nJob Purpose:\nThe Associate Director, Systems Risk leads the application and systems risk capability within GSK's Risk Operations Centre, reporting to the Director, Risk Detection & Response. This role builds continuous control monitoring of applications and systems to assess control operating effectiveness and provide risk assurance, grounded in a deep understanding of the evolving threat landscape and the business context and architecture of GSK's critical systems.\nAbout the team:\nSystems Risk provides the continuous monitoring, control assurance and risk assessment that GSK's business-facing Technology Risk and Compliance teams and the wider Risk Operations Centre rely on to understand and manage the risk carried by GSK's critical business applications and systems, from onboarding through change to decommissioning.\nKey responsibilities:\nThis role will provide you the opportunity to lead key activities to progress your career. These responsibilities include some of the following:\nBuild and maintain a deep understanding of the evolving threat landscape relevant to GSK's critical business applications and systems, as well as their business context and architecture.\nBuild and run continuous control monitoring across applications and systems to provide ongoing visibility into control operating effectiveness, synthesising system understanding and threat intelligence into a holistic, continuous view of risk.\nAssess risk and provide assurance over application and system controls, informing risk treatment and prioritisation decisions.\nLead ad hoc, detailed risk assessments of applications and systems, acting as subject matter expert on systems and application security and controls.\nAdvise system and application owners on the controls their systems require and the risk they carry.\nMaintain the system risk register and keep it current as the estate changes.\nPartner closely with the Risk Intelligence and Automation team on gathering, automating and visualising application and systems risk data.\nPartner with the business-facing Technology Risk and Compliance Business Partners teams who own the business relationship, providing them with the data, risk assessments and assurance they need to engage system and business owners effectively.\nInfluence the roadmap of teams building out the security capabilities needed to defend GSK's business systems and applications.\nTrack system remediation and risk treatment through to closure.\nFeed systemic and cross-system risk themes back into policy, architecture and the wider Risk Operations Centre.\nBasic Qualifications:\nDegree in a relevant discipline, or related experience.\nDemonstrated experience in technology or application risk assessment, control evaluation or information security risk.\nStrong understanding of the evolving threat landscape relevant to enterprise business systems and applications.\nWorking knowledge of enterprise system and application architecture, with the ability to understand the business context of critical systems.\nExperience building or operating continuous control monitoring for applications or systems.\nPractical experience with risk register management.\nSignificant experience in cyber security within the relevant domain.\nProven experience leading a team or a substantial programme of work.\nExperience managing delivery to plan, quality and timelines.\nExcellent relationship management, influencing and communication skills, including the ability to influence the roadmap of other teams.\nPreferred Qualifications:\nWorking knowledge of NIST CSF, NIST 800-53 and ISO 27001.\nExperience assessing risk across the system lifecycle.\nExperience with GRC tooling such as ServiceNow.\nExperience in a regulated industry, including GxP systems.\nExperience partnering with data, analytics or automation teams to build continuous control monitoring, dashboards or risk indices.\nFamiliarity with enterprise architecture frameworks or application security standards (e.g., OWASP, SANS Top 25).\nRelevant certification such as CRISC, CISA, CISM, CISSP.\nExperience in pharmaceutical, life sciences or another highly regulated industry.\n Skills\nApplication Risk Assessment, Cloud Security, Control Monitoring, Cybersecurity, Data Integrity, Executive Reports, Identity Access Management (IAM), Internal Control Evaluation, Risk Assessments, Risk Management, Risk Management Framework, Security Architecture Design, Security Compliance, Security Policies, Security Risk, Technical Risk Assessment, Third Party Risk Management, Threat Analysis, Vulnerability Management, Web Application SecurityWhy GSK?\nUniting science, technology and talent to get ahead of disease together.\nGSK is a global biopharma company with a purpose to unite science, technology and talent to get ahead of disease together. We aim to positively impact the health of 2.5 billion people by the end of the decade, as a successful, growing company where people can thrive. We get ahead of disease by preventing and treating it with innovation in specialty medicines and vaccines. We focus on four therapeutic areas: respiratory, immunology and inflammation; oncology; HIV; and infectious diseases - to impact health at scale.\nPeople and patients around the world count on the medicines and vaccines we make, so we’re committed to creating an environment where our people can thrive and focus on what matters most. Our culture of being ambitious for patients, accountable for impact and doing the right thing is the foundation for how, together, we deliver for patients, shareholders and our people.\nInclusion at GSK:\nAs an employer committed to Inclusion, we encourage you to reach out if you need any adjustments during the recruitment process.\nPlease contact our Recruitment Team at  to discuss your needs.\nImportant notice to Employment businesses/ Agencies\nGSK does not accept referrals from employment businesses and/or employment agencies in respect of the vacancies posted on this site. All employment businesses/agencies are required to contact GSK's commercial and general procurement/human resources department to obtain prior written authorization before referring any candidates to GSK. The obtaining of prior written authorization is a condition precedent to any agreement (verbal or written) between the employment business/ agency and GSK. In the absence of such written authorization being obtained any actions undertaken by the employment business/agency shall be deemed to have been performed without the consent or contractual agreement of GSK. GSK shall therefore not be liable for any fees arising from such actions or any fees arising from any referrals by employment businesses/agencies in respect of the vacancies posted on this site.\nIt has come to our attention that the names of GlaxoSmithKline or GSK or our group companies are being used in connection with bogus job advertisements or through unsolicited emails asking candidates to make some payments for recruitment opportunities and interview. Please be advised that such advertisements and emails are not connected with the GlaxoSmithKline group in any way.\nGlaxoSmithKline does not charge any fee whatsoever for recruitment process. Please do not make payments to any individuals / entities in connection with recruitment with any GlaxoSmithKline (or GSK) group company at any worldwide location. Even if they claim that the money is refundable.\nIf you come across unsolicited email from email addresses not ending in gsk.com or job advertisements which state that you should contact an email address that does not end in “gsk.com”, you should disregard the same and inform us by emailing , so that we can confirm to you if the job is genuine.","description_format":"text","description_chars":8464,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Prescription Drugs","Vaccines","Oncology Therapeutics","Infectious Disease Therapeutics"],"lifecycle":[{"event":"open","at":"2026-10-27T14:15:46Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":2,"expected_fill_days":17,"reasons":["conf:0","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-30T05:48:23Z"},"pay":null,"html_url":"https://alion.io/job/gsk-associate-director-systems-risk","json_url":"https://alion.io/job/gsk-associate-director-systems-risk.json","meta":{"generated_at":"2026-10-30T21:57:21Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12523,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6649},"rest":"https://alion.io/mcp/rest/get_company?id=6649"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgsk-associate-director-systems-risk"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgsk-associate-director-systems-risk"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgsk-associate-director-systems-risk"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/gsk-associate-director-systems-risk\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgsk-associate-director-systems-risk"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3337162}},{"tool":"search_jobs","arguments":{"company":"gsk.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3337162},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}