Senior Principal - Design Assurance & Product Management - Network & Zero Trust

Overview

Own security product management for Network, Zero Trust and MDR tooling: the product lifecycle, roadmap, adoption and outcomes. Define requirements with the architecture domains, manage vendor delivery, and own the investment case and total cost position.

What you'll do

• Own the product lifecycle and roadmap for Network, Zero Trust and MDR security tooling.
• Define product requirements with the architecture domains and track them through build to release.
• Own adoption as an enforcement figure: the share of application access brokered through Zscaler or Prisma Access rather than legacy VPN, and the share of the estate under Illumio microsegmentation policy, and act when migration stalls behind an application owner's objection.
• Manage Zscaler, Netskope, Illumio and the MDR provider against delivery and detection-quality commitments, including mean time to deploy new detection content and false-positive rates on tuned rules.
• Own the investment case and total cost of ownership position.
• Run the product governance forum and keep decisions traceable.
• Assess new network, ZT and detection tooling on commercial and lifecycle grounds, while Network and Zero Trust Architecture assesses technical fit.
• Land the consolidation of overlapping remote-access and proxy estates (legacy VPN concentrators, standalone secure web gateways and point CASB tools) into the SASE platform, on a dated retirement schedule.
• Act as the escalation point for the SOC and network engineering teams when a detection gap or enforcement-point outage is attributed to the product rather than the service.
• Drive the roadmap from identity-based intrusion and lateral movement, using segmentation coverage and brokered-access share as the judged metrics.
• Lead your team in using approved AI tools to improve productivity and ways of working, role-modelling responsible use and following GSK's Responsible AI, privacy and security requirements.
• Apply GxP, GDPR and data integrity requirements to the tooling in scope, so a routine product change cannot disturb a validated system or the records it holds.
• Coach domain analysts and peers in product management practice.

What you'll need

• 15+ years in cyber security in a regulated environment, with domain focus on security products for Network & Zero Trust and MDR & Detection Engineering.
• End-to-end product ownership of Network & Zero Trust and MDR & Detection Engineering tools, translating threat intelligence and CISO requirements into funded use cases, with 1-3 year roadmaps for investment, consolidation and retirement and published adoption metrics.
• Vendor evaluation, selection and lifecycle management, with value tracked against threat and risk coverage using automated performance reporting, driving decommission where value is not evidenced.
• Working in parallel with the Security Solution Engineering squad for Network & Zero Trust and MDR & Detection Engineering, aligning use cases and roadmaps to build, test and vendor handover plans, and coordinating with architecture and Design Assurance without owning standards.
• Evaluating AI-enabled network and detection products (AI-driven detection, GenAI SOC copilots and agentic SOAR) and their vendor AI claims.
• Bachelor's degree in a relevant discipline, or equivalent professional experience.

Nice to have

• Technical familiarity with Zero Trust enforcement points, segmentation, SASE and SD-WAN, secure remote access, SIEM, SOAR, EDR/XDR and MDR tooling.
• Product management discipline: roadmaps, adoption and coverage metrics, and decommission business cases.
• Vendor governance rhythm: QBRs, executive business reviews, SLA management and commercial negotiation input to Procurement.
• Portfolio analytics, licence utilisation and renewal calendar management, with tracking and alerts automated through dashboards.
• Product management certification (Pragmatic Institute, SAFe POPM or equivalent) or CISSP.

Details

• Location: Bengaluru, Luxor North Tower.