Job Description

The IBM Manager will lead the delivery of the D&T IBM service and be involved in providing expertise and knowledge about technical requirements as well as a method of testing of the controls; analysing test results, monitoring trends, giving recommendations about remediation actions and monitoring the completion of them; monitoring the external environment and identifying threats and risks plus helping in implementing tools and methodologies for meeting the controls. They will lead a team of third party staff to deliver the testing and reporting of results to the D&T teamResponsible for IBM Risk and Controls Framework and Written Standards. This second line of defense is key for the Digital and Tech organistion to understand controls effectiveness across the organisation.Key Roles & Responsibilities:

• Select and train the external IBM team and ensure continuous training of team
• Ensure robust testing protocols aligned with the Technology Controls Framework
• Based on the risk, technical and business knowledge provides recommendations for the annual IBM schedule of testing on a twice-yearly basis.
• Lead continuous improvement initiatives within the IBM service and work with 3rd party Service team to design KRIs and reporting
• Share the knowledge with other D&T teams of IBM service, explain details and provide directions as needed.
• Representing GRC in discussions on IBM testing reporting across D&T

Business Expertise: .

• \xc2\xb7 A strong communicator, able to present ideas simply and coherently leading to achieving a consensus, even where stakeholders are from a diverse range of business areas
• \xc2\xb7 Excellent relationship management, strong influencing & collaboration skills with an ability to gain the respect/buy-in from all stakeholder levels across Digital and Tech
• \xc2\xb7 Good level of understanding of Cyber Security and Auditing Standards
• \xc2\xb7 Demonstrated experience in Auditing risk management and/or policy
• \xc2\xb7 Proficiency in creating technical documents such as policy drafts, guidelines, and compliance reports
• \xc2\xb7 Subject matter expertise in Auditing, Testing and Risk Management

Diverse problem solving across Technology and Regulatory landscape. Risk-based decisions must be made based on the combination of global regulatory requirements and Haleon technology capability. Strong audit background required to deliver high quality of testing and reportingRequired Licenses/Certifications: Good to haveIndustry-standard awareness, training, or certification. For example ISO27001, NIST, CPA, CFA, CMA, CIA, CRISC, CISM, CISA or CISSPCare to join us. Find out what life at Haleon is really like www.haleon.com/careers/At Haleon we embrace our diverse workforce by creating an inclusive environment that celebrates our unique perspectives, generates curiosity to create unmatched understanding of each other, and promotes fair and equitable outcomes for everyone. We're striving to create a climate where we celebrate our diversity in all forms by treating each other with respect, listening to different viewpoints, supporting our communities, and creating a workplace where your authentic self belongs and thrives. We believe in an agile working culture for all our roles. If flexibility is important to you, we encourage you to explore with our hiring team what the opportunities are.As you apply, we will ask you to share some personal information, which is entirely voluntary. We want to have an opportunity to consider a diverse pool of qualified candidates and this information will assist us in meeting that objective and in understanding how well we are doing against our inclusion and diversity ambitions. We would really appreciate it if you could take a few moments to complete it. Rest assured, Hiring Managers do not have access to this information and we will treat your information confidentially.Haleon is an Equal Opportunity Employer. All qualified applicants will receive equal consideration for employment without regard to race, color, national origin, religion, sex, pregnancy, marital status, sexual orientation, gender identity/expression, age, disability, genetic information, military service, covered/protected veteran status or any other federal, state or local protected class.Please note that if you are a US Licensed Healthcare Professional or Healthcare Professional as defined by the laws of the state issuing your license, Haleon may be required to capture and report expenses Haleon incurs, on your behalf, in the event you are afforded an interview for employment. This capture of applicable transfers of value is necessary to ensure Haleons compliance to all federal and state US Transparency requirements.

Haleon