Welcome to Haleon. We’re a purpose-driven, world-class consumer company putting everyday health in the hands of millions. In just three years since our launch, we’ve grown, evolved and are now entering an exciting new chapter – one filled with bold ambitions and enormous opportunity.

Our trusted portfolio of brands – including Sensodyne®, Panadol®, Advil®, Voltaren®, Theraflu®, Otrivin®, and Centrum® – lead in resilient and growing categories. What sets us apart is our unique blend of deep human understanding and trusted science.

Now it’s time to fully realise the full potential of our business and our people. We do this through our Win as One strategy. It puts our purpose – to deliver better everyday health with humanity – at the heart of everything we do. It unites us, inspires us, and challenges us to be better every day, driven by our agile, performance-focused culture.

The Security Product Owner for Cloud Data & AI is accountable for leading the development, execution, and continuous improvement of security capabilities across the cloud, data and AI platforms which support our Cyber posture. This role provides delivery leadership for globally distributed engineering teams and serves as a co-owner of cyber product strategy and roadmaps in partnership with the Haleon architecture function. The position requires functional knowledge in cyber product capabilities, strong cross-functional leadership, and the ability to influence without direct authority across engineering, architecture, operations, and cyber defense teams.

The individual will directly manage a team of engineers and subject matter experts responsible for capability development, enhancement, and operational sustainment. The successful candidate will have demonstrated experience delivering enterprise-scale security capabilities, tracking and reporting measurable outcomes, and partnering with senior leaders (Director, VP, and occasionally CISO staff) to communicate progress, risk posture, and investment needs.

Key Responsibilities

Strategic Planning & Co-ownership of Roadmaps

• Be accountable for cyber product controls across the Haleon Enterprise. Engaging with Data Teams, Cyber Defence and SOAR teams to ensure end-to-end integration of cyber products
• Own relationship and engagement with I.T. Operations and delivery functions
• Own relationship with vendors and suppliers across the Cloud, Data and A.I. product domain, initiating regular performance reviews and support procurement with renewals
• Provide regular reporting of status and progress to Haleon leadership
• Co‑develop a 3‑year cyber product capability maturity roadmap with Haleon’s architecture function.
• Contribute subject matter expertise on cybersecurity capabilities, detection and response enablement needs, and emerging control patterns.
• Ensure strategic alignment and end to end integration across all other cyber towers and business owners

Product Ownership & Delivery Leadership

• Serve as the primary owner of execution for all Cloud and IA Cyber products, capabilities, and enhancements.
• Lead cross‑functional delivery teams across engineering, architecture, and operations, ensuring consistent execution of roadmap commitments.
• Own the product backlog including intake, refinement, prioritisation, sequencing, and communication of delivery outcomes.
• Ensure security capabilities are designed and implemented for scalability, operational sustainability, and compliance with enterprise standards.

Operational Responsibility

• Maintain shared responsibility for operational run‑state quality, ensuring that capabilities are reliable, measurable, and integrated into operational workflows.
• Ensure appropriate operational readiness before major releases, including runbooks, support processes, and monitoring.
• Partner with operations teams to address post‑deployment issues, scalability concerns, and continuous improvement opportunities.

Performance Measurement & Metrics

• Manage and report on Vendor/Supplier KPIs
• Develop and maintain Key Control Indicators (KCIs) and Key Risk Indicators (KRIs) with reproducible, transparent measurement methodologies.
• Track and report posture, control effectiveness, adoption, and operational performance indicators.
• Present regular progress updates, dashboards, and risk summaries to Director and VP‑level stakeholders.

Resource & Cost Awareness

• Provide input into cost forecasting and monitor cost drivers related to cloud, AI and data security capabilities.
• Maintain accountability for delivering within cost expectations while not directly owning budget approval processes.

Leadership & Talent Development

• Work across matrixed organisation supporting Solution Architecture and Cyber Defence resource
• Directly manage and develop 3–5 engineers/SMEs, ensuring strong technical capability, performance management, and succession planning.
• Cultivate a culture of delivery excellence, operational discipline, and continuous improvement.

Stakeholder Engagement

• Partner closely with Cyber Defence teams (SOC, IR, Insider Threat, Vulnerability Management, Threat Intelligence, and Forensics) to ensure capabilities support detection and response needs.
• Collaborate across cloud engineering, data platform, DevOps, and enterprise IT teams to drive adoption and integration of controls.
• Communicate progress, risks, decisions, and tradeoffs clearly to Director, VP, and occasional CISO-level stakeholders.

Qualifications & Skills

• 15+ years of experience in cybersecurity product management, cloud/data security, or enterprise technology leadership roles.
• Proven experience leading delivery of complex, multi‑platform security capabilities in large enterprises.
• Strong technical literacy in cloud and data security concepts, including posture management, governance, data protection, and platform security. Understanding of Artificial Intelligence Risk management (IAM expertise not required).
• Demonstrated experience managing global teams and influencing across organisational boundaries.
• Strong communication, stakeholder management, and executive reporting skills.

Preferred

• Experience collaborating with architecture teams on multi‑year strategy development.
• Experience supporting SOC/IR/DFIR operations with integrated cyber capabilities.
• Background in tool rationalisation, integration strategy, and enterprise-scale security modernisation.
• Professional certifications (preferred, not required).

 Job Posting End Date

Equal Opportunities

Haleon are committed to mobilising our purpose in a way that represents the diverse consumers and communities who rely on our brands every day. It guides us in creating an inclusive culture, where different backgrounds and views are valued and respected – all in support of understanding and best serving the needs of our consumers and unleashing the full potential of our people. It’s important to us that Haleon is a place where all our employees feel they truly belong.

During the application process, we may ask you to share some personal information, which is entirely voluntary. This information ensures we meet certain regulatory and reporting obligations and supports the development, refinement, and execution of our inclusion and belonging programmes that are open to all Haleon employees. 

The personal information you provide will be kept confidential, used only for legitimate business purposes, and will never be used in making any employment decisions, including hiring decisions.

Adjustment or Accommodations Request

If you require a reasonable adjustment or accommodation or other assistance to apply for a job at Haleon at any stage of the application process, please let your recruiter know by providing them with a description of specific adjustments you are requesting. We’ll provide all reasonable adjustments to support you throughout the recruitment process and treat all information you provide us in confidence. 

Note to candidates

The Haleon recruitment team will contact you using a Haleon email account (@haleon.com). If you are not sure whether the email you received is from Haleon, please get in touch.