D&T Risk Oversight Lead

Welcome to Haleon. We’re a purpose-driven, world-class consumer company putting everyday health in the hands of millions. In just three years since our launch, we’ve grown, evolved and are now entering an exciting new chapter – one filled with bold ambitions and enormous opportunity.

Our trusted portfolio of brands – including Sensodyne®, Panadol®, Advil®, Voltaren®, Theraflu®, Otrivin®, and Centrum® – lead in resilient and growing categories. What sets us apart is our unique blend of deep human understanding and trusted science.

Now it’s time to fully realise the full potential of our business and our people. We do this through our Win as One strategy. It puts our purpose – to deliver better everyday health with humanity – at the heart of everything we do. It unites us, inspires us, and challenges us to be better every day, driven by our agile, performance-focused culture.

About the role

The Risk Oversight Lead is responsible for providing leadership, governance, and subject matter expertise across IT and Cyber risk oversight activities. The role ensures that all risk assessments conducted by the Risk Oversight Analysts are consistent, well reasoned, challenge based, and aligned with Haleon’s risk appetite and enterprise risk management methodologies.

The role oversees the quality, completeness, and accuracy of cyber risk assessments; ensures threats and vulnerabilities are evaluated consistently; and drives the escalation of risks where thresholds are exceeded. It acts as the senior focal point for cyber and technology risk oversight, developing strong relationships across D&T, product teams, security, internal audit, procurement, legal, quality and compliance stakeholders to enable informed decision making.

The Risk Oversight Lead develops reporting for senior leadership, supports risk committees, ensures remediation tracking is governed effectively, and fosters a culture of transparency and accountability in risk management.

Role Responsibilities

• Lead and manage the Risk Oversight Analyst(s), ensuring consistent, high quality delivery of qualitative and quantitative cyber and technology risk assessments across D&T.

• Review, challenge, and approve risk assessments, ensuring threats, vulnerabilities, impacts, likelihoods, and recommended mitigations adhere to enterprise risk methodology and reflect business realities.

• Oversee enterprise wide risk monitoring, triage, and escalation, ensuring risks exceeding tolerance are escalated appropriately and endorsed at the right governance levels.

• Develop and deliver risk reporting for senior leadership, including trend analysis, thematic risk insights, high risk exposures, and remediation performance across global teams.

• Provide independent challenge to technology, security, and business stakeholders, ensuring risk treatments, control decisions, and remediation plans are robust, timely, and reflect Haleon’s risk appetite.

• Drive continuous improvement of the IT & Cyber Risk Oversight function, including methodology updates, tooling improvements, training, capability uplift, and strengthening relationships with internal audit, procurement, ethics & compliance, and other risk partners.

• Deep understanding of cybersecurity risk methodologies, assessment techniques, quantitative and qualitative evaluation approaches, and industry frameworks (e.g., NIST, ISO 27005).

• Strong knowledge of cyber threats, vulnerabilities, and threat actor behaviours, including industry‑specific risks relevant to consumer health, pharma, and manufacturing environments.

• Understanding of business operations, supply chain, regulatory landscapes, cloud technologies, OT/IoT environments, and how technology risk impacts strategic objectives.

• Experience working with risk management frameworks, risk appetite models, treatment plans, and senior risk governance forums.

Why you? 

Basic Qualifications:

• Degree or equivalent in Cybersecurity, Information Systems, Risk Management, or related discipline.

• 12 – 18 years of relevant experience

• Experience conducting and reviewing cybersecurity risk assessments and developing mitigation strategies.

• Experience overseeing or coordinating risk management activities in a large, complex organisation.

• Strong knowledge of cyber threats, vulnerabilities, controls, and risk methodologies.

Preferred Qualifications: 

• Advanced degree or professional certification in security or risk management.

• Experience managing or mentoring risk analysts or similar roles.

• Experience in regulated sectors (pharma, healthcare, consumer health, manufacturing).

• Experience using GRC or risk management platforms.

• Professional certifications such as CRISC, CISSP, CISM, CCSP, or similar.

 

 

 

 Job Posting End Date

 

 

2026-07-06

 

 

 

Equal Opportunities

Haleon are committed to mobilising our purpose in a way that represents the diverse consumers and communities who rely on our brands every day. It guides us in creating an inclusive culture, where different backgrounds and views are valued and respected – all in support of understanding and best serving the needs of our consumers and unleashing the full potential of our people. It’s important to us that Haleon is a place where all our employees feel they truly belong.

During the application process, we may ask you to share some personal information, which is entirely voluntary. This information ensures we meet certain regulatory and reporting obligations and supports the development, refinement, and execution of our inclusion and belonging programmes that are open to all Haleon employees. 

The personal information you provide will be kept confidential, used only for legitimate business purposes, and will never be used in making any employment decisions, including hiring decisions.

 

 

 

Adjustment or Accommodations Request

If you require a reasonable adjustment or accommodation or other assistance to apply for a job at Haleon at any stage of the application process, please let your recruiter know by providing them with a description of specific adjustments you are requesting. We’ll provide all reasonable adjustments to support you throughout the recruitment process and treat all information you provide us in confidence. 

 

 

 

Note to candidates

The Haleon recruitment team will contact you using a Haleon email account (@haleon.com). If you are not sure whether the email you received is from Haleon, please get in touch.