Overview
Lead OT security architecture across GSK's global manufacturing, laboratory and research estate, leading a team of seven, including four OT architects across the US, UK and India, and hold Workday line management for three architects in other domains.
What you'll do
- Own OT security architecture across the global manufacturing, laboratory and research estate.
- Own IEC 62443 zone and conduit design and Purdue model network segmentation.
- Own safety system boundary design and the constraints that follow from GxP validation.
- Own OT vulnerability management architecture where standard IT patching cannot be applied, including compensating control design.
- Own OT asset discovery architecture across sites with incomplete inventories.
- Own OT detection architecture for handoff to the Cyber Defence SOC, which operates it.
- Drive convergence of IT and OT security controls without importing IT assumptions that break production.
- Lead four OT architects across the US, UK and India, plus Workday line management for three architects whose functional work sits in other domains.
- Lead the OT architecture contribution to the Future Ready OT programme, GSK's multi-year effort to bring manufacturing and laboratory sites to a common OT security baseline.
- Assure vendor handover for OT tooling and retain architecture accountability.
- Lead your team in using approved AI tools to improve productivity and ways of working, role-modelling responsible use and following GSK's Responsible AI, privacy and security requirements.
- Evaluate and select OT security tooling against the architecture model, and own the cost and value of the OT security estate across the site portfolio.
What you'll need
- 20+ years in security architecture, including managing matrixed reports across geographies.
- Domain focus: OT Security (OT, ICS and IoT across manufacturing, laboratory and research sites); domain authority aligned to IEC 62443 and the Purdue Model.
- OT network zone and conduit segmentation and OT monitoring integration using Claroty, Dragos or Nozomi Networks.
- OT vulnerability management where IT patching cannot be applied: compensating controls, automated asset discovery and risk posture reporting.
- OT detection patterns and playbooks for the SOC and vendor.
- Leading an OT specialist team within GxP-validated manufacturing constraints, where a routine IT control can halt production.
- Applying AI and ML to OT security: anomaly detection in OT networks, AI-assisted asset discovery and secure adoption of AI in manufacturing.
- Bachelor's degree in a relevant discipline, or equivalent professional experience.
Nice to have
- Leading an OT transformation or Future Ready OT style programme at enterprise scale.
- OT asset discovery architecture across sites with incomplete or unreliable inventories.
- NIS2 scoping and reporting obligations for manufacturing sites in scope, and the evidence a competent authority expects.
- OT risk posture reporting to executive leadership, including automated dashboards, and direct engagement with site engineering and operations teams.
- Partnering with Cyber Defence on OT threat exposure management and OT SOC handoffs.
Details
- Location: Bengaluru Luxor North Tower.
- Team spans the US, UK and India.
Read the full description and apply on the company’s own careers page.