Lead Analyst Design Assurance & Product Management - Application Security

As a Domain Analyst covering Application Security, Data Security and Cloud Security at GSK, you will perform pre-production and BAU reviews for tooling in these domains and maintain the design assurance register. The Design Assurance team independently verifies that solutions meet the architecture standards set elsewhere in Cyber Architecture and Solutions.

Key Responsibilities

• Perform pre-production reviews for application security tooling including SAST, DAST and SCA.

• Review data security tooling including DLP and data classification against data security architecture standards.

• Review cloud security tooling and landing-zone configurations against cloud security standards.

• Keep review records current in the assurance register to the evidence standard audit will test.

• Record each finding against the specific security standard clause it breaches and track it to evidenced closure.

• Validate vendor-delivered SAST, DAST and SCA toolchain configurations against secure SDLC integration patterns.

• Prepare review packs and evidence for governance forums.

Requirements

• 10+ years in cyber security with domain focus on Design Assurance for Application Security, Data Security and Cloud Security

• Experience with pre-production design assurance reviews of security tooling

• Experience reviewing SAST, DAST, SCA, DLP, data classification, CSPM and CIEM configurations

• Experience owning an assurance register with finding status and SLA tracking

• Bachelor's degree in a relevant discipline, or equivalent professional experience

Preferred Qualifications

• Knowledge of SDLC integration and API security controls

• Experience with multi-cloud security control consistency and policy-as-code