Director - Security Architecture & Solutions Engineering - Shared engineering build function

Overview

Lead the shared engineering build function for GSK's security domains, building, testing and packaging the solutions defined by domain architects so that a managed service vendor can operate them after handover.

What you'll do

• Own build, test and packaging across all security domains, leading seven engineers across four squads.
• Own the quality of vendor handover packages so a managed service can operate what was built without Cyber Architecture and Solutions present.
• Build to the specifications the architecture domains set, escalating design problems rather than reinterpreting them.
• Own acceptance against the architecture specification and the operational readiness criteria, and refuse handover where test evidence does not cover the failure modes the design depends on.
• Own engineering standards, reusable build components and the solution testing playbook library.
• Arbitrate when two domain Directors want the same squad in the same sprint, and hold the line on test coverage when a programme date is at risk.
• Lead and develop seven engineers, including three squad leads, an engineering excellence lead and the analyst and support roles.
• Own the configuration record standard the whole function builds to, sufficient to answer a GxP audit on who changed which control and under what change.
• Send back specifications that cannot be tested, including those with no stated success criteria, failure mode or rollback.
• Run vendor shadowing and reverse-shadowing through transition, and close the gaps their first 30 days expose back into the handover pack standard.
• Lead your team in using approved AI tools to improve productivity and ways of working, role-modelling responsible use and following GSK's Responsible AI, privacy and security requirements.
• Own hiring, performance management and succession across the four squads, and build the engineering bench the function will need as the vendor model matures.

What you'll need

• 20+ years in security engineering, including leading technical teams across geographies.
• Experience leading a security engineering team turning architecture into built, tested capability across squads matching the Product Management domains.
• Experience with standard builds through automated pipelines, including build documentation, test evidence, configuration baselines and operational playbooks, plus a cross-domain security automation programme.
• Experience with vendor handover packs and operational-readiness sign-off before managed service takeover, and proof-of-value builds informing architecture and investment decisions.
• Experience engineering AI-enabled security solutions and using GenAI and agentic automation to accelerate builds, testing and documentation, including the build, test and documentation standards that agentic automation is held to.
• Bachelor's degree in a relevant discipline, or equivalent professional experience.

Nice to have

• Infrastructure as code, CI/CD and configuration management tooling (Terraform, Ansible, GitHub Actions).
• Security certification such as CISSP, or vendor certifications across SIEM, EDR or network security platforms.
• Regulated industry experience, including GxP.
• Experience running release management for security tooling where a failed EDR or proxy change has blast radius across more than 100 countries.
• Experience standing up a shared security engineering function from scratch, including the first build standards and the first vendor handover pack.

Details

• Location: Bengaluru Luxor North Tower.
• Typical tools and technologies include build and test automation, infrastructure as code using Terraform and Ansible, CI/CD pipelines, containerisation and Kubernetes, security tooling integration and API automation, Python and PowerShell, and ServiceNow.