About the role
The Control Advisory and Assurance Director leads a service that validates all relevant security and compliance requirements (derived from Written Standards) are adequately addressed throughout the product lifecycle and post go‑live, ensuring Security & Compliance by Design. This role governs ongoing changes to the overall D&T control environment and provides ongoing expert advice to improve controls. It hosts the Control Center of Excellence, ensuring robust operational governance and advisory services across Digital & Technology. The role works closely with first‑line defense teams, second‑line defense outside D&T such as Financial Risk Management and Controls, and InfoSec policy and advisory teams to ensure security by design principles are adhered to during project deliveries. The role actively involves the One SOX program, ensures remediation activities are defined and completed on time, and drafts Audit Risk Committee papers, aligning with stakeholders and maintaining accuracy. The role requires constant interaction with senior stakeholders within and outside D&T.
Role Responsibilities
- Control assurance services: define and maintain the D&T Risk Assessment process, providing tools and expert guidance to the first line of defence.
- Project assurance leadership: oversee assurance activities across all D&T Tech Business Units, ensuring compliance with all relevant Written Standards and regulatory requirements (SOX, GxP, cybersecurity).
- Governance of control operations: lead governance of control operations and manage the Control COE for SOX and GxP.
- Change management: govern changes to the control environment, ensuring alignment with compliance frameworks and risk appetite.
- Regulatory audit support: coordinate regulatory audits and inspections, ensuring timely remediation and advisory support.
- Continuous improvement: drive optimisation of processes and controls, embedding compliance by design principles into projects and BAU activities.
Qualifications
- Bachelor’s degree in Information Systems, Computer Science, Engineering, or a related field.
- Significant experience in IT General Controls (ITGC).
- Experience working with managing external audits and regulatory inspections.
- Significant experience in embedding “security and compliance by design” into projects and BAU activities.
- Experience with preparing Audit Risk Committee papers and ensuring audit readiness.
- Deep familiarity with SOX and GxP compliance requirements and audit readiness.
- Significant experience in embedding lessons learned into updated frameworks to prevent recurrence.
- Experience in providing expert guidance to first-line teams and senior leadership.
- Experience in influencing adoption of compliance practices without compromising business agility.
Preferred Qualifications
- CISA / CRISC/ CGEIT or other relevant qualification.
Equal Opportunities
Haleon are committed to mobilising our purpose in a way that represents the diverse consumers and communities who rely on our brands every day. It guides us in creating an inclusive culture, where different backgrounds and views are valued and respected – all in support of understanding and best serving the needs of our consumers and unleashing the full potential of our people. It’s important to us that Haleon is a place where all our employees feel they truly belong.
#J-18808-Ljbffr…