Independent Assessment Analyst

Welcome to Haleon. We’re a purpose-driven, world-class consumer company putting everyday health in the hands of millions. In just three years since our launch, we’ve grown, evolved and are now entering an exciting new chapter – one filled with bold ambitions and enormous opportunity.

Our trusted portfolio of brands – including Sensodyne®, Panadol®, Advil®, Voltaren®, Theraflu®, Otrivin®, and Centrum® – lead in resilient and growing categories. What sets us apart is our unique blend of deep human understanding and trusted science.

Now it’s time to fully realise the full potential of our business and our people. We do this through our Win as One strategy. It puts our purpose – to deliver better everyday health with humanity – at the heart of everything we do. It unites us, inspires us, and challenges us to be better every day, driven by our agile, performance-focused culture.

About the role

The Independent Assessment Analyst supports the delivery of independent risk and control evaluations across critical technology areas within D&T, operating as part of the second line of defence. The role performs testing of control design and operating effectiveness, evaluates evidence quality, challenges first‑line assessments, and helps ensure that technology risk and control activities accurately reflect Haleon’s Written Standards and regulatory requirements.

Working under the direction of the Independent Assessment Lead, the Analyst contributes to assessment planning, executes detailed testing, prepares evidence summaries, and supports the analysis of risk observations and remediation actions.

The role requires strong analytical capability, attention to detail, and the ability to exercise independent judgement when reviewing technical environments and control documentation. Through rigorous assessment outputs, the role helps strengthen Haleon’s overall control maturity, reduce systemic weaknesses, and prevent escalation of issues into significant audit findings.

Role Responsibilities

• Execute independent assessments across defined high risk technology areas, reviewing first line risk and control assessments, validating evidence, and ensuring documentation meets required standards.

• Perform detailed testing of control design and operational effectiveness following D&T Written Standards, including alignment to SOX, GxP, and cybersecurity requirements.

• Prepare structured assessment outputs (including evidence logs, control testing results, and risk observations) for review and consolidation by the Independent Assessment Lead.

• Participate in walkthroughs, discussions, and evidence gathering sessions with first line teams to understand control context, challenge assumptions, and clarify documentation gaps.

• Support monitoring and validation of remediation actions, assessing whether corrective activities address underlying issues and that closure evidence is complete and adequate.

• Contribute to the maintenance of independent assessment methodologies, templates, and evidence standards to ensure repeatability, consistency, and rigour across all assessments.

Why you? 

Basic Qualifications:

• Bachelor’s degree in information systems, Computer Science, Cybersecurity, Risk Management, Engineering, or a related field.

• Practical experience in technology risk, control assessment, internal audit, or cybersecurity.

• Experience reviewing controls, evaluating evidence, and preparing structured assessment documentation.

• Working knowledge of IT general controls, application controls, cybersecurity basics, and relevant governance frameworks.

• Exposure to remediation validation activities and the evaluation of closure evidence.

• Familiarity with risk management concepts and control effectiveness assessment techniques.

• Certifications such as CISA, CRISC, Security+, ISO 27001 Lead Auditor, or similar credentials are advantageous but not required.

Preferred Qualifications:

• Postgraduate studies or advanced training in technology risk, internal audit, cybersecurity, or governance (e.g., ISACA, ISC2, ISO programs).

• 3–6+ years in technology risk, control assurance, audit, or cybersecurity roles.

• Experience supporting SOX, GxP, cybersecurity, or similar regulatory programmes.

• Exposure to thematic reviews or analysis across multiple assurance activities.

• Experience contributing to the development or refinement of methodologies, templates, or assurance artefacts.

 

 

 

 Job Posting End Date

 

 

2026-06-26

 

 

 

Equal Opportunities

Haleon are committed to mobilising our purpose in a way that represents the diverse consumers and communities who rely on our brands every day. It guides us in creating an inclusive culture, where different backgrounds and views are valued and respected – all in support of understanding and best serving the needs of our consumers and unleashing the full potential of our people. It’s important to us that Haleon is a place where all our employees feel they truly belong.

During the application process, we may ask you to share some personal information, which is entirely voluntary. This information ensures we meet certain regulatory and reporting obligations and supports the development, refinement, and execution of our inclusion and belonging programmes that are open to all Haleon employees. 

The personal information you provide will be kept confidential, used only for legitimate business purposes, and will never be used in making any employment decisions, including hiring decisions.

 

 

 

Adjustment or Accommodations Request

If you require a reasonable adjustment or accommodation or other assistance to apply for a job at Haleon at any stage of the application process, please let your recruiter know by providing them with a description of specific adjustments you are requesting. We’ll provide all reasonable adjustments to support you throughout the recruitment process and treat all information you provide us in confidence. 

 

 

 

Note to candidates

The Haleon recruitment team will contact you using a Haleon email account (@haleon.com). If you are not sure whether the email you received is from Haleon, please get in touch.