Principal - Design Assurance & Product Management - Pre-production

Overview

Senior individual contributor leading design assurance reviews of complex, high-risk Tier 1 and cross-domain security tools, and acting as primary technical reviewer for vendor deliverable assurance.

What you'll do

• Lead design assurance reviews for Tier 1 and high-risk tools across every Cyber Architecture and Solutions domain: cloud, network and Zero Trust, platform and detection, data security, application security, OT and AI.
• Run threat modelling and architecture risk assessment yourself on the designs you review, rather than relying on the submitting team's assessment.
• Act as primary technical reviewer for vendor deliverable assurance, validating that vendor-delivered platform configurations match the Cyber Architecture and Solutions design specification before acceptance.
• Take the reviews the domain analysts escalate: designs spanning more than one architecture domain, designs with no review precedent, and any design where an analyst's finding is formally contested by the submitting architect.
• Conduct independent architecture challenge on design outputs before they go to build, and tell an expert architect their design does not meet a standard when it does not.
• Set the review approach for designs that arrive without precedent, and have it adopted into the published methodology so a one-off judgement becomes a repeatable criterion.
• Raise recurring findings to the owning architecture domain as a formal standards gap with the evidence attached, and re-test once the standard is amended, without drafting the amendment yourself.
• Record findings against a specific standard clause, classified Critical, High, Medium or Low, clearly enough that teams can act without further interpretation.
• Escalate contested findings rather than negotiating them away, and own them through to remediation close-out.
• Use approved AI tools in your day-to-day work to improve your own productivity and your team's ways of working, sharing what works and applying sound judgement, including validating outputs and following GSK's Responsible AI, privacy and security requirements.
• Mentor Design Assurance analysts on review technique and evidence quality, and review their findings before they are issued.

What you'll need

• 10+ years in cyber security with deep security architecture expertise, domain focus: Design Assurance Tier 1 and cross-domain reviews.
• Leading design assurance reviews of complex, high-risk Tier 1 tools across all domains, with personal accountability for review rigour and findings owned to close-out.
• Vendor deliverable assurance: validating vendor-delivered configurations against the design specification and leading vendor acceptance testing, with automated drift detection.
• Independent challenge of architecture designs before build, including from senior architects, and developing assessment criteria for AI tools, OT platforms and cloud-native services.
• Leading design assurance of AI tools and agentic solutions: guardrails, tool-calling scope, data exposure and model risk, against AI security standards.
• Bachelor's degree in a relevant discipline, or equivalent professional experience.

Nice to have

• Experience holding a finding against an architect more senior than you, and the evidence trail that made it stick.
• Threat modelling and architecture risk assessment.
• Scripting or policy-as-code for review evidence and drift checks.
• Preparing evidence for internal or external audit, including GxP documentation.
• Acting as the most senior reviewer in the practice, verifying against standards owned elsewhere.

Details

• Location: Bengaluru, Luxor North Tower.
• No line management; authority comes from the quality of the review.