IT Standards & Control Framework Analyst
Haleon
Bengaluru, Karnataka, India
Full-Time
Competitive
HybridAssociate
Welcome to Haleon. We’re a purpose-driven, world-class consumer company putting everyday health in the hands of millions. In just three years since our launch, we’ve grown, evolved and are now entering an exciting new chapter – one filled with bold ambitions and enormous opportunity.
Our trusted portfolio of brands – including Sensodyne®, Panadol®, Advil®, Voltaren®, Theraflu®, Otrivin®, and Centrum® – lead in resilient and growing categories. What sets us apart is our unique blend of deep human understanding and trusted science.
Now it’s time to fully realise the full potential of our business and our people. We do this through our Win as One strategy. It puts our purpose – to deliver better everyday health with humanity – at the heart of everything we do. It unites us, inspires us, and challenges us to be better every day, driven by our agile, performance-focused culture.
About the role
The IT Standards & Control Framework Development Analyst supports the development, maintenance, and continuousimprovement ofHaleon’sDigital & Technology Written Standards and the Technology Control Framework. Workingunder the direction of the Standards & Control Framework Development Lead, the Analyst performs detailed analysis,
content drafting, control mapping, document lifecycle management, and cross-functional coordination to ensurestandards and controls areaccurate, current, risk-based, and aligned with regulatory and audit expectations.
The role helps translate regulatory obligations (SOx, ITGC,GxP, GDPR, cybersecurity regulations) into well-structured,clear, and adoptable standards and control requirements. It supports master control creation and maintenance in theenterprise GRC platform and ensures consistent alignment across requirements, Written Standards, and control designelements. The Analystassistsin simplifying documentation, rationalising duplicative requirements, and ensuringstandardsremainrelevant,accessible, and operationally practical across engineering, security, operations, and riskteams.
Role Responsibilities
Foundational understanding of IT risk management, internal controls, and compliance frameworks (SOx, ISO27001, NIST,GxP).
Working knowledge of IT processes, IT general controls (ITGCs), cybersecurity principles, and digital product /engineering operating models.
Ability to interpret regulatory and compliance requirements and support conversion into clear standards and control definitions.
Familiarity with GRC platforms, metadata structures, and master control frameworks.
Understanding of documentation standards, version control, and lifecycle management for policy and standard governance.
Capability to analyse complex requirements and distil them into structured, concise, and consistent standard content
Contributes to enterprise-wide governance by improving the quality and consistency of D&T Written Standardsand the Control Framework.
Impactshow compliance, cybersecurity, risk management, engineering, and operational teams adopt andimplement standards.
SupportsHaleon’sability tomaintainregulatory adherence, meet audit expectations, andoperatea clear andcoherent control environment.
Improves internal efficiency through better documentation quality, simpler controls, and structured lifecycleprocesses
Works closely with the Standards & Control Framework Development Lead for direction, prioritisation, andquality review.
Collaborates with engineering teams, security, privacy, risk & compliance, internal audit, quality, and GRCtooling teams to gather inputs and ensure documentation accuracy.
Communicates clearly and professionally to support understanding and adoption of standards across diversetechnical andnon‑technical audiences.
Requires strong analytical writing skills and the ability to simplify complex regulatory content into structured,readable standards.
Must coordinate across multiple teams to ensure standards and controlsremainaligned and consistentlyapplied.
Why you?
Basic Qualifications:
Bachelor’s degree in Information Systems, Technology, Cybersecurity, Risk Management, or related discipline.
Experience in IT governance, IT controls, or standards / policy development.
Understanding of regulatory or compliance frameworks (SOx, privacy, cybersecurity)
Experience supporting document lifecycle management oroperatingwithin structured governance frameworks.
Experience working with GRC platforms or control framework
Preferred Qualifications:
5–7 years in IT risk, technology governance, compliance, or cybersecurity functions.
Experience in large,globalor regulated environments (healthcare, consumer health, pharmaceuticals).
Exposure to control rationalisation, simplification, or standards harmonisation efforts.
Certifications from top accredited risk management bodies (ISACA, IRM, GARP, PMI).
Job Posting End Date
2026-07-06Haleon are committed to mobilising our purpose in a way that represents the diverse consumers and communities who rely on our brands every day. It guides us in creating an inclusive culture, where different backgrounds and views are valued and respected – all in support of understanding and best serving the needs of our consumers and unleashing the full potential of our people. It’s important to us that Haleon is a place where all our employees feel they truly belong.
During the application process, we may ask you to share some personal information, which is entirely voluntary. This information ensures we meet certain regulatory and reporting obligations and supports the development, refinement, and execution of our inclusion and belonging programmes that are open to all Haleon employees.
The personal information you provide will be kept confidential, used only for legitimate business purposes, and will never be used in making any employment decisions, including hiring decisions.
If you require a reasonable adjustment or accommodation or other assistance to apply for a job at Haleon at any stage of the application process, please let your recruiter know by providing them with a description of specific adjustments you are requesting. We’ll provide all reasonable adjustments to support you throughout the recruitment process and treat all information you provide us in confidence.
The Haleon recruitment team will contact you using a Haleon email account (@haleon.com). If you are not sure whether the email you received is from Haleon, please get in touch.