Executive Director – Governance, Risk and Compliance

Role Overview

• Set vision and strategy for Amgen’s digital Governance, Risk and Compliance efforts globally
• Provide oversight and assurance for Amgen’s Information Security program in alignment with ISO 27002:2022
• Oversee Technology’s Document Management Services (DMS)
• Work with Quality, Finance and Security leadership to provide oversight and effectively manage GxP, Security and SOX deviations and corrective and preventive actions (CAPAs)
• Partner with Corporate Audit and the Technology Extended Leadership Team to manage audit responses
• Oversee Amgen’s Global Records and Information Management operations
• Work with key stakeholders to improve compliance capabilities (e.g., GxP agile validation and process simplification)
• Manage and oversee Amgen’s Risk services, including third-party business enablement and Amgen’s digital risk register
• Deliver timely transparency reports and metrics to key stakeholders and senior business leadership (e.g., Chief Financial Officer, Chief Information Officer, Chief Information Security Officer, Quality leadership, etc.)
• Maintain outstanding service delivery and collaborate diligently with global functional teams to achieve continuous improvement of governance, risk, and compliance services
• Lead Artificial Intelligence (AI) Risk and Controls working team comprised of cross-functional business units to accelerate Amgen’s adoption of Trustworthy AI
• Serve as a key stakeholder and strategic partner to the Responsible AI Council, representing Technology and ensuring alignment of AI governance, risk, and control frameworks with enterprise Responsible AI principles and regulatory expectations
• Create and manage budgets for yearly support, enhancements and build efforts and maximize resource allocation across multiple services and tools; this includes operational costs for resources (full-time employees, contract workers, and managed service providers) used to operate GRC
• Empower employees through Amgen’s Decision, Advice, Inform (DAI) model; delegate responsibilities accordingly and expect accountability and regular feedback
• Foster teamwork and unity among department members that allows for healthy debate, rapid conflict resolution, appreciation of diversity, and strong team cohesiveness
• Coach, mentor, and develop staff, including overseeing new employee onboarding and providing quarterly career development sessions
• Lead employees using a performance management and development process that provides an overall framework to encourage employee contribution and includes goal setting and continuous feedback
• Guide talent identification and development processes
• Collaborate with global industry partners and service providers in the Health Information Sharing and Analysis Center (H-ISAC)

Requirements

• Doctorate degree & 6 years of information security experience OR Master’s degree & 10 years of information security experience OR Bachelor’s degree & 12 years of information security experience AND 6 years of managerial experience directly managing people and/or leadership experience leading teams, projects, programs or directing the allocation of resources
• Experience working with Agile principles and values to transform waterfall-based processes (e.g., Scaled Agile Framework [SAFe])
• Practical experience in leading global multi-disciplined GRC teams (e.g., SOX, Quality, Security)
• Experience with regulated systems (GxP, SOX) in the pharmaceutical, biotechnology, healthcare industry
• Practical experience working in compliance with corporate audit and global regulations (e.g., China Cybersecurity Law, NIS2, Global Data Protection Regulation, etc.)
• Executive written and verbal communication skills to diverse target audiences
• Understanding of records information management, retention schedule management, and oversight
• Ability to coordinate/lead multiple projects/activities with competing priorities
• Portfolio and project management skills
• Data-driven problem solving and analytical skills and proven experience within high performance team
• Skilled in negotiation of critical issues
• Understanding of and ability to manage cognitive biases
• Attention to detail and focus on providing vetted information
• Up to date on current information security trends and topics
• Experience working with global virtual teams
• Successful management of multiple priorities
• Team-oriented, placing priority on the successful completion of team goals
• Self-starter with a high degree of initiative and motivation and able to work effectively under minimal supervision.
• Preferred Certifications (Any): CRISC, CISSP, CGEIT, CISM, CISA, GRCP

Tech Stack

• Cyber Security
• Unity

Benefits

• Comprehensive employee benefits package, including a Retirement and Savings Plan with generous company contributions
• group medical, dental and vision coverage
• life and disability insurance
• flexible spending accounts.
• A discretionary annual bonus program, or for field sales representatives, a sales-based incentive plan
• Stock-based long-term incentives
• Award-winning time-off plans and bi-annual company-wide shutdowns
• Flexible work models, including remote work arrangements, where possible