Independent Assessment and Monitoring Director

Welcome to Haleon. We’re a purpose-driven, world-class consumer company putting everyday health in the hands of millions. In just three years since our launch, we’ve grown, evolved and are now entering an exciting new chapter – one filled with bold ambitions and enormous opportunity.

Our trusted portfolio of brands – including Sensodyne®, Panadol®, Advil®, Voltaren®, Theraflu®, Otrivin®, and Centrum® – lead in resilient and growing categories. What sets us apart is our unique blend of deep human understanding and trusted science.

Now it’s time to fully realise the full potential of our business and our people. We do this through our Win as One strategy. It puts our purpose – to deliver better everyday health with humanity – at the heart of everything we do. It unites us, inspires us, and challenges us to be better every day, driven by our agile, performance-focused culture.

About the Role

The Independent Assessment and Monitoring Director leads a service that provides targeted assessments at process and control levels to evaluate whether technology and operations meet D&T Risk, Security & Compliance standards. Its primary purpose is to assess the effectiveness of key controls against high-risk areas, track key risk indicators (KRIs), and monitor the technology environment for emerging risks. The function provides objective oversight and evaluation of the first line’s risk and compliance management activities, challenging risk and control evaluations, control designs, and operational effectiveness.

This role actively interacts with the Internal Audit team ( Enterprise Audit and Risk) to provide additional audit coverage where technical expertise is required and delivers independent reports on the state of technology risk and compliance to D&T leadership. Unlike traditional 3 lines of defense roles, this position actively participates in resolving issues and improving the control environment before they escalate into material findings.

This role ensures that strategic security and compliance transformation initiatives are independently assessed and monitored to confirm that risk and compliance requirements are embedded effectively. This role requires specialized expertise in technology risk, control assurance, and monitoring, and plays a critical part in strengthening Haleon’s overall risk posture.

Key Roles & Responsibilities

- Conduct targeted evaluations of high-risk areas, challenging first-line risk assessment and control effectiveness.

- Define and track key risk indicators to identify emerging risks and changes in the technology risk landscape.

- Evaluate first-line control assessments and provide independent validation of control design and operational performance. Monitor closely strategic D&T security and compliance transformation projects to ensure that risk and compliance requirements are embedded effectively, controls are implemented as designed, and emerging risks are identified and addressed proactively.

- Partner with internal audit to provide technical expertise and additional coverage for complex technology areas. Deliver objective reports on technology risk and compliance status to senior management and governance committees.

- Establish continuous risk and control monitoring mechanisms to proactively identify emerging risks, assess control performance, and ensure timely escalation of issues. Leverage automation and analytics to enhance monitoring, enabling real-time insights.

- Actively support remediation and improvement of control environments, preventing escalation to material audit findings.

Business Expertise

The Independent Assessment and Monitoring Director requires deep expertise in risk oversight, control assurance, and continuous monitoring to deliver objective evaluations and strengthen Haleon’s technology risk posture. Key dimensions include:

- Advanced understanding of enterprise risk management principles and the three lines of defense model, with the ability to challenge first-line risk and control evaluations, control designs, and operational effectiveness constructively.

- Expertise in designing and implementing continuous risk and control monitoring mechanisms, including defining and tracking Key Risk Indicators (KRIs) and leveraging automation and analytics for real-time insights.

- Proven experience in assessing IT General Controls (ITGC), application controls, and operational processes against regulatory and internal standards. Ability to identify systemic weaknesses and recommend pragmatic remediation strategies.

- Skilled in partnering with Internal Audit to provide technical expertise and additional audit coverage.

- Ability to provide independent, objective insights to senior leadership on technology risk and compliance posture, influencing strategic decisions and investment priorities.

- Strong understanding of information security principles, secure development lifecycle, and technology governance frameworks. Familiarity with cloud security, data protection, and emerging technologies.

- Strong interpersonal skills to engage with first-line operational teams, second-line oversight functions, and senior executives globally. Skilled in challenging constructively while maintaining collaboration.

- Understanding of D&T processes and ability to align monitoring activities with organizational priorities.

- Commitment to enhancing monitoring processes and control environments through innovation, simplification, and automation.

Problem Solving

This role operates in a highly complex environment where technology risk and compliance oversight must be delivered with independence, precision, and agility. The nature of problems encountered requires advanced analytical, technical, and interpersonal skills:

- This role must challenge first-line risk and control evaluations, control designs, and operational effectiveness without creating friction, requiring diplomacy and strong evidence-based reasoning.

- Interpreting Key Risk Indicators (KRIs) and monitoring data to identify emerging risks and systemic weaknesses before they escalate. This involves synthesizing large volumes of technical and operational data into actionable insights.

- Adapting assessment and monitoring strategies to evolving technologies, regulatory changes, and business priorities. Solutions must remain flexible yet robust to maintain compliance and resilience.

- Maintaining objectivity as a second-line function while actively supporting remediation and improvement initiatives. This dual role demands judgment to avoid compromising independence while enabling timely resolution of issues.

- Aligning monitoring activities with multiple regulatory and internal standards (SOX, GxP, cybersecurity) and ensuring consistency across global operations.

- Working with Internal Audit to provide technical expertise and additional coverage for complex technology areas, while ensuring remediation plans are practical and completed on time.

- Designing and implementing continuous monitoring mechanisms that leverage automation and analytics for real-time risk insights, reducing manual effort and improving accuracy.

- Resolving issues proactively before they become material findings, requiring creative problem-solving and strong stakeholder engagement.

Nature & Area of Impact

The Independent Assessment and Monitoring Director has a critical, enterprise-wide impact on Haleon’s technology risk posture and compliance maturity. This role ensures that risk and compliance management activities performed by the first line are effective, accurate, and aligned with D&T Written Standards.

- Provides independent oversight to confirm that technology operations meet SOX, GxP, cybersecurity, and other compliance requirements. Failure to execute effectively could result in regulatory breaches, financial penalties, and reputational damage.

- Delivers objective, data-driven insights on technology risk and control effectiveness to senior le