IT Standards & Control Framework Analyst

Welcome to Haleon. We’re a purpose-driven, world-class consumer company putting everyday health in the hands of millions. In just three years since our launch, we’ve grown, evolved and are now entering an exciting new chapter – one filled with bold ambitions and enormous opportunity.

Our trusted portfolio of brands – including Sensodyne®, Panadol®, Advil®, Voltaren®, Theraflu®, Otrivin®, and Centrum® – lead in resilient and growing categories. What sets us apart is our unique blend of deep human understanding and trusted science.

Now it’s time to fully realise the full potential of our business and our people. We do this through our Win as One strategy. It puts our purpose – to deliver better everyday health with humanity – at the heart of everything we do. It unites us, inspires us, and challenges us to be better every day, driven by our agile, performance-focused culture.

About the role

The IT Standards & Control Framework Development Analyst supports the development, maintenance, and continuous improvement of Haleon’s Digital & Technology Written Standards and the Technology Control Framework. Working under the direction of the Standards & Control Framework Development Lead, the Analyst performs detailed analysis,

content drafting, control mapping, document lifecycle management, and cross-functional coordination to ensure standards and controls are accurate, current, risk-based, and aligned with regulatory and audit expectations.

The role helps translate regulatory obligations (SOx, ITGC, GxP, GDPR, cybersecurity regulations) into well-structured, clear, and adoptable standards and control requirements. It supports master control creation and maintenance in the enterprise GRC platform and ensures consistent alignment across requirements, Written Standards, and control design elements. The Analyst assists in simplifying documentation, rationalising duplicative requirements, and ensuring standards remain relevant, accessible, and operationally practical across engineering, security, operations, and risk teams.

Role Responsibilities

- Foundational understanding of IT risk management, internal controls, and compliance frameworks (SOx, ISO27001, NIST, GxP).

- Working knowledge of IT processes, IT general controls (ITGCs), cybersecurity principles, and digital product /engineering operating models.

- Ability to interpret regulatory and compliance requirements and support conversion into clear standards and control definitions.