Independent Assessment and Monitoring Director
Haleon · Bengaluru
Welcome to Haleon. We’re a purpose-driven, world-class consumer company putting everyday health in the hands of millions. In just three years since our launch, we’ve grown, evolved and are now entering an exciting new chapter – one filled with bold ambitions and enormous opportunity.
Our trusted portfolio of brands – including Sensodyne®, Panadol®, Advil®, Voltaren®, Theraflu®, Otrivin®, and Centrum® – lead in resilient and growing categories. What sets us apart is our unique blend of deep human understanding and trusted science.
Now it’s time to fully realise the full potential of our business and our people. We do this through our Win as One strategy. It puts our purpose – to deliver better everyday health with humanity – at the heart of everything we do. It unites us, inspires us, and challenges us to be better every day, driven by our agile, performance-focused culture.
About the Role
The Independent Assessment and Monitoring Director leads a service that provides targeted assessments at process and control levels to evaluate whether technology and operations meet D&T Risk, Security & Compliance standards. Its primary purpose is to assess the effectiveness of key controls against high-risk areas, track key risk indicators (KRIs), and monitor the technology environment for emerging risks. The function provides objective oversight and evaluation of the first line’s risk and compliance management activities, challenging risk and control evaluations, control designs, and operational effectiveness.
This role actively interacts with the Internal Audit team (Enterprise Audit and Risk) to provide additional audit coverage where technical expertise is required and delivers independent reports on the state of technology risk and compliance to D&T leadership. Unlike traditional 3 lines of defense roles, this position actively participates in resolving issues and improving the control environment before they escalate into material findings.
This role ensures that strategic security and compliance transformation initiatives are independently assessed and monitored to confirm that risk and compliance requirements are embedded effectively. This role requires specialized expertise in technology risk, control assurance, and monitoring, and plays a critical part in strengthening Haleon’s overall risk posture.
Key Roles & Responsibilities
Conduct targeted evaluations of high-risk areas, challenging first-line risk assessment and control effectiveness.
Define and track key risk indicators to identify emerging risks and changes in the technology risk landscape.
Evaluate first-line control assessments and provide independent validation of control design and operational performance. Monitor closely strategic D&T security and compliance transformation projects to ensure that risk and compliance requirements are embedded effectively, controls are implemented as designed, and emerging risks are identified and addressed proactively.
Partner with internal audit to provide technical expertise and additional coverage for complex technology areas. Deliver objective reports on technology risk and compliance status to senior management and governance committees.
Establish continuous risk and control monitoring mechanisms to proactively identify emerging risks, assess control performance, and ensure timely escalation of issues. Leverage automation and analytics to enhance monitoring, enabling real-time insights.
Actively support remediation and improvement of control environments, preventing escalation to material audit findings.
Business Expertise:
The Independent Assessment and Monitoring Director requires deep expertise in risk oversight, control assurance, and continuous monitoring to deliver objective evaluations and strengthen Haleon’s technology risk posture. Key dimensions include:
Advanced understanding of enterprise risk management principles and the three lines of defense model, with the ability to challenge first-line risk and control evaluations, control designs, and operational effectiveness constructively.
Expertise in designing and implementing continuous risk and control monitoring mechanisms, including defining and tracking Key Risk Indicators (KRIs) and leveraging automation and analytics for real-time insights.
Proven experience in assessing IT General Controls (ITGC), application controls, and operational processes against regulatory and internal standards. Ability to identify systemic weaknesses and recommend pragmatic remediation strategies.
Skilled in partnering with Internal Audit to provide technical expertise and additional audit coverage.
Ability to provide independent, objective insights to senior leadership on technology risk and compliance posture, influencing strategic decisions and investment priorities.
Strong understanding of information security principles, secure development lifecycle, and technology governance frameworks. Familiarity with cloud security, data protection, and emerging technologies.
Strong interpersonal skills to engage with first-line operational teams, second-line oversight functions, and senior executives globally. Skilled in challenging constructively while maintaining collaboration.
Understanding of D&T processes and ability to align monitoring activities with organizational priorities.
Commitment to enhancing monitoring processes and control environments through innovation, simplification, and automation.
Problem Solving:
This role operates in a highly complex environment where technology risk and compliance oversight must be delivered with independence, precision, and agility. The nature of problems encountered requires advanced analytical, technical, and interpersonal skills:
This role must challenge first-line risk and control evaluations, control designs, and operational effectiveness without creating friction, requiring diplomacy and strong evidence-based reasoning.
Interpreting Key Risk Indicators (KRIs) and monitoring data to identify emerging risks and systemic weaknesses before they escalate. This involves synthesizing large volumes of technical and operational data into actionable insights.
Adapting assessment and monitoring strategies to evolving technologies, regulatory changes, and business priorities. Solutions must remain flexible yet robust to maintain compliance and resilience.
Maintaining objectivity as a second-line function while actively supporting remediation and improvement initiatives. This dual role demands judgment to avoid compromising independence while enabling timely resolution of issues.
Aligning monitoring activities with multiple regulatory and internal standards (SOX, GxP, cybersecurity) and ensuring consistency across global operations.
Working with Internal Audit to provide technical expertise and additional coverage for complex technology areas, while ensuring remediation plans are practical and completed on time.
Designing and implementing continuous monitoring mechanisms that leverage automation and analytics for real-time risk insights, reducing manual effort and improving accuracy.
Resolving issues proactively before they become material findings, requiring creative problem-solving and strong stakeholder engagement.
Nature & Area of Impact:
The Independent Assessment and Monitoring Director has a critical, enterprise-wide impact on Haleon’s technology risk posture and compliance maturity. This role ensures that risk and compliance management activities performed by the first line are effective, accurate, and aligned with D&T Written Standards.
Provides independent oversight to confirm that technology operations meet SOX, GxP, cybersecurity, and other compliance requirements. Failure to execute effectively could result in regulatory breaches, financial penalties, and reputational damage.
Delivers objective, data-driven insights on technology risk and control effectiveness to senior leadership and governance committees, enabling informed decision-making and proactive risk mitigation.
Actively participates in resolving deficiencies before they escalate into material audit findings, reducing exposure and improving operational resilience.
Establishes mechanisms to track KRIs and emerging risks, ensuring Haleon maintains a forward-looking risk posture. This proactive approach minimizes surprises and supports strategic agility.
Enhances audit readiness by collaborating with Internal Audit and providing technical expertise for complex technology areas. Independent assessments reduce audit findings and improve regulator confidence.
Influences risk and compliance culture across D&T by constructively challenging first-line practices and embedding continuous improvement. Drives alignment between operational teams, governance functions, and senior stakeholders.
Shapes technology risk strategies by providing independent evaluations that inform investment decisions in compliance tooling, automation, and monitoring capabilities.
Interactions / Interpersonal Skills:
This role requires strong interpersonal and communication skills to operate effectively across D&T Tech BUs/ Functions while maintaining independence as a second-line function. The Director must balance objective oversight with collaborative engagement to strengthen Haleon’s risk posture. Key aspects include:
Works closely with first-line risk and compliance teams, control owners, and operators to challenge risk ratings and control effectiveness constructively while fostering a culture of continuous improvement.
Partners with Enterprise Audit and Risk teams to provide technical expertise and additional audit coverage for complex technology areas, ensuring alignment and avoiding duplication of effort.
Prepares and presents independent reports on technology risk and compliance posture to D&T leadership.
Ability to challenge first-line assessments diplomatically, gain buy-in for remediation actions, and resolve conflicts between operational priorities and compliance requirements.
Skilled in translating complex technical and regulatory concepts into clear, actionable insights for both technical teams and senior executives.
Collaborate closely with the Risk Oversight & Management Director to identify and design fit-for-purpose Key Risk Indicators for all D&T Functional risks.
Collaborate closely with the Control Assurance & Advisory Director to align independent monitoring activities with project assurance efforts, ensuring consistent oversight of risk and compliance requirements across strategic initiatives and operational processes.
Collaborate closely with the Risk & Compliance Tooling Lead to implement continuous risk and control monitoring mechanisms leveraging automation and analytics.
Collaborate closely with the InfoSec Cyber Defense team to ensure that independent monitoring activities align with security threat detection and response strategies, enabling proactive identification of vulnerabilities and strengthening Haleon’s overall cyber resilience.
Collaborate closely with the Security & Awareness Training team in DTIS to prepare and orchestrate awareness/ training campaigns when control and security gaps have been identified through independent assessment.
Skills & Qualification:
Bachelors or Masters Degree in relevant field.
15+ years significant experience in IT General Controls (ITGC)
Experience in designing and deploying Continuous Risk and Control Monitoring mechanisms (KRIs and KPIs).
Experience in leveraging automation and analytics tools for real-time insights and proactive risk detection.
Experience in collaborating with Internal Audit for technical coverage of complex technology areas.
Experience in designing pragmatic remediation strategies for systemic weaknesses identified during assessments.
SOX and GxP experience.
CISA / CRISC or other relevant qualification.
Job Posting End Date
2026-10-31Equal Opportunities
Haleon are committed to mobilising our purpose in a way that represents the diverse consumers and communities who rely on our brands every day. It guides us in creating an inclusive culture, where different backgrounds and views are valued and respected – all in support of understanding and best serving the needs of our consumers and unleashing the full potential of our people. It’s important to us that Haleon is a place where all our employees feel they truly belong.
During the application process, we may ask you to share some personal information, which is entirely voluntary. This information ensures we meet certain regulatory and reporting obligations and supports the development, refinement, and execution of our inclusion and belonging programmes that are open to all Haleon employees.
The personal information you provide will be kept confidential, used only for legitimate business purposes, and will never be used in making any employment decisions, including hiring decisions.
Adjustment or Accommodations Request
If you require a reasonable adjustment or accommodation or other assistance to apply for a job at Haleon at any stage of the application process, please let your recruiter know by providing them with a description of specific adjustments you are requesting. We’ll provide all reasonable adjustments to support you throughout the recruitment process and treat all information you provide us in confidence.
Note to candidates
The Haleon recruitment team will contact you using a Haleon email account (@haleon.com). If you are not sure whether the email you received is from Haleon, please get in touch.