GSK
Bengaluru, Karnataka, India Posted 2d ago
Serve as the quality, governance and product authority for Cyber Architecture & Solutions at GSK. You are accountable for ensuring every security solution Cyber Architecture and Solutions designs and builds meets the required quality, compliance and operational standard before it reaches the global managed service vendor — the independent quality gate between what Cyber Architecture and Solutions produces and what the vendor is asked to operate.
Key Responsibilities
Define, own and continuously improve the Cyber Architecture and Solutions governance and quality framework — the assurance process, the pass or fail criteria for vendor handover and the exception regime — applying the design standards owned by the Architecture function rather than authoring them.
Own and operate the independent design assurance process, making binding pass or fail determinations on vendor handover readiness with no compromise on quality.
Lead a 17-role function spanning Design Assurance, Security Product Management, and vendor and portfolio governance, sustaining a culture of rigour, independence and delivery.
Own the Cyber Architecture and Solutions security product portfolio: product roadmaps for every capability under Cyber Architecture and Solutions's remit, full lifecycle management from introduction through evolution to decommission, prioritised against GSK's cyber risk appetite.
Hold ultimate commercial accountability for vendor governance across the managed service — performance, SLA, escalation and commercial levers, and oversight of platform support as it transitions to the OTO model — with day-to-day governance delegated to the Associate Director for vendor governance.
Own Cyber Architecture and Solutions security risk and exception management at the most senior level: assess complex architectural risk exceptions, maintain the Cyber Architecture and Solutions risk register, and escalate material unmitigated risk with unambiguous clarity.
Own Cyber Architecture and Solutions-wide metrics and security posture reporting, and present authoritative outcomes.
Requirements
15+ years in cyber security, including 7+ in senior leadership in a regulated environment leading leaders across geographies — domain focus: function head for cyber security product management and Design Assurance across the Cyber Architecture and Solutions portfolio.
End-to-end product management of cyber security products — threat-led use-case definition, business case and investment, roadmap, vendor evaluation and selection, onboarding, adoption and value tracking, renewal and decommission — running capabilities as products with outcome KPIs.
Building and leading a cyber security product management practice with domain product owners for each domain group, each mirrored to a Security Solution Engineering squad working in parallel, and technical deep dives proving product efficacy and integration.
Leading an independent Design Assurance practice and governing a security managed service — binding pass or fail decisions on handover readiness made against standards owned by the Architecture function and never by you, supported by drift detection, QBRs and EBCs.
Leading AI adoption across the portfolio and assurance — AI-enabled tool evaluation, assurance of agentic solutions and AI-driven lifecycle automation from intake to decommission.
Preferred Qualifications
Architecture literacy to make binding quality judgements on expert architecture output they do not own, expressed as non-conformance to a specific standard clause.
Delivering enterprise security tool rationalisation with quantified savings, sequenced against renewal dates, with automated utilisation and renewal analytics.
Evidencing design and product governance to internal audit, external audit and regulators, producing decisions, approvals and exceptions on demand.
Credibility with Board-level risk committees, presenting assurance outcomes, portfolio performance and residual risk directly.
Commercial acumen — multi-year vendor contracts, TCO and cost-to-serve modelling.
