Information Assurance (IA) Advisor

Welcome to Haleon. We’re a purpose\-driven, world\-class consumer company putting everyday health in the hands of millions. In just three years since our launch, we’ve grown, evolved and are now entering an exciting new chapter – one filled with bold ambitions and enormous opportunity.

Our trusted portfolio of brands – including Sensodyne®, Panadol®, Advil®, Voltaren®, Theraflu®, Otrivin®, and Centrum® – lead in resilient and growing categories. What sets us apart is our unique blend of deep human understanding and trusted science.

Now it’s time to fully realise the full potential of our business and our people. We do this through our Win as One strategy. It puts our purpose – to deliver better everyday health with humanity – at the heart of everything we do. It unites us, inspires us, and challenges us to be better every day, driven by our agile, performance\-focused culture.

• *About the role**

The Information Assurance (IA) Advisor plays a critical role in ensuring that Haleon’s technology, data, and business systems are designed and operated securely. This role partners across business, architecture, and technical domains to assess solutions, identify cyber risks, and drive alignment to Haleon Policies and Standards. The analyst enables the organisation to manage cyber risk effectively across key technical areas—including IAM, Data, Cloud, OT, Infrastructure, and Applications—by reviewing architecture, analysing data flows, and advising on secure design decisions.

• *Role Responsibilities**

• *Cyber Risk Assessment \& Advisory**

• Lead cyber security assessments for new and existing business systems, working closely with Business Owners, Technical Owners, Domain Architects, and SMEs.
• Review solution architectures and lifecycle controls to ensure compliance with Haleon Policies and Standards.
• Provide expert advisory on cyber risks, control gaps, and mitigation options, ensuring decisions are riskinformed and business aligned.

• *Risk Management \& Documentation**

• Investigate, analyse, and document identified cyber risks in a structured manner, ensuring accurate and consistent recording within Haleon risk management systems and processes
• Support remediation planning by working with product teams and technical stakeholders to define practical, sustainable corrective actions.

• *Policy \& Standards Governance**

• Interpret Haleon Policies and Standards into actionable requirements for engineering, architecture, and operational teams.
• Support policy exception evaluations and contribute to continuous improvement of the policy framework.

• *Continuous Compliance \& Automation**

• Support the development and enhancement of automated controls and continuous compliance monitoring solutions.
• Work with engineering teams to embed compliance checks into delivery pipelines and operational platforms.

• **Why you?***

• *Basic Qualifications:**

• 5–10 years of experience in Cyber Security or Information Security roles.
• Strong understanding of key technical domains, including IAM, Data, Cloud, OT, Infrastructure, and Application Security.
• Experience conducting cyber risk assessments, architecture reviews, or control framework evaluations.

• *Preferred Qualifications:**

• Professional certifications such as CISSP, CISM, or relevant domain specific qualifications.
• Experience with enterprise governance frameworks (ISO 27001, NIST CSF, CIS Controls).
• Familiarity with large‑scale enterprise environments, ideally in regulated sectors, FMCG, or healthcare.
• Experience with automated compliance tooling and/or cloud native security controls.

• *Job Posting End Date**

2026\-07\-06**Equal Opportunities**

• ----------------------

Haleon are committed to mobilising our purpose in a way that represents the diverse consumers and communities who rely on our brands every day. It guides us in creating an inclusive culture, where different backgrounds and views are valued and respected – all in support of understanding and best serving the needs of our consumers and unleashing the full potential of our people. It’s important to us that Haleon is a place where all our employees feel they truly belong.

During the application process, we may ask you to share some personal information, which is entirely voluntary. This information ensures we meet certain regulatory and reporting obligations and supports the development, refinement, and execution of our inclusion and belonging programmes that are open to all Haleon employees.

The personal information you provide will be kept confidential, used only for legitimate business purposes, and will never be used in making any employment decisions, including hiring decisions.

• *Adjustment or Accommodations Request**
• ---------------------------------------

If you require a reasonable adjustment or accommodation or other assistance to apply for a job at Haleon at any stage of the application process, please let your recruiter know by providing them with a description of specific adjustments you are requesting. We’ll provide all reasonable adjustments to support you throughout the recruitment process and treat all information you provide us in confidence.

• *Note to candidates**
• ---------------------

The Haleon recruitment team will contact you using a Haleon email account (@haleon.com). If you are not sure whether the email you received is from Haleon, please get in touch.