Associate Director, Digital Investigations

The Associate Director, Digital Investigations, Analytics & Insider Threat will lead a defined area of the Digital Investigations, Analytics & Insider Threat capability, with insider threat operations as the priority focus, and the team or programme that delivers it. This is a leadership role accountable for running current insider threat operations and for setting the strategic direction for the agentic AI framework that will optimise and automate the prevention, detection and response to insider threat events.

About the team:

The Digital Investigations, Analytics and Insider Threat team runs GSK's insider threat program end to end, detecting, investigating and responding to threats from those who already have authorised access, and protecting GSK intellectual property and confidential business information from insider risk. The team also covers digital forensics and investigative analytics in support of insider threat and related casework. Alongside running current operations, the team is building an agentic AI framework to optimise and automate the prevention, detection and response to insider threat events, and every role in the team contributes to its development.

Key responsibilities:

• Lead a defined area of the capability, including its people, delivery and outcomes, with insider threat operations as the priority.
• Own the strategy to deter, detect and respond to threats against GSK intellectual property and confidential business information.
• Oversee digital investigations into suspected policy violation, data theft and insider activity, and the tactical analysis that detects insider threat indicators.
• Oversee the tuning of detection logic across DLP and UEBA platforms and the data pipelines (HR, access, endpoint, email and cloud telemetry) that feed the analytics layer.
• Carry out insider threat risk assessments across business units, functions and scenarios.
• Own the roadmap for the team's agentic AI framework: set the strategic direction for using agentic AI to optimise and automate insider threat prevention, detection and response, secure stakeholder buy-in and investment, and govern the responsible, compliant use of AI in investigations.
• Manage delivery against the capability roadmap and escalate blockers early.
• Develop team capability through coaching, review and structured feedback.
• Represent the area in CSO governance and cross-functional forums.

Basic Qualifications:

• Degree in a relevant discipline, or related experience.
• Demonstrated experience in digital investigations, insider threat or corporate investigations.
• Working knowledge of investigative analytics and case handling.
• Practical experience with DLP and UEBA platforms.
• Significant experience in cyber security within the relevant domain.
• Proven experience leading a team or a substantial programme of work.
• Experience managing delivery to plan, quality and timelines.
• Excellent relationship management, influencing and communication skills.

Preferred Qualifications:

• Hands-on experience with Data Loss Prevention and User and Entity Behavior Analytics platforms.
• Experience with digital forensics tooling and evidence handling.
• Experience handling matters with HR and Legal involvement.
• Statistical analysis and data visualization skill.
• Relevant certification such as CERT Insider Threat Program Manager, GCITP, GCFA, GCFE, CISSP, CompTIA Security+.
• Experience in pharmaceutical, life sciences or another highly regulated industry.
• Experience leading AI or automation transformation initiatives within a security or risk function.
• Typical tools and technologies: DLP, UEBA, EDR, SIEM, forensic imaging and analysis tooling, case management platforms.