Senior Principal - Design Assurance & Product Management - Security Products

Overview

End-to-end product owner for GSK's Data Security and Cloud/SaaS security tool domains, translating threat intelligence and compliance requirements into capability use cases and owning the product roadmap and investment.

What you'll do

• Own the end-to-end product lifecycle for the Data Security and Cloud/SaaS security tool domains.
• Translate data security threat intelligence and compliance requirements into capability use cases.
• Coordinate with Security Architecture on solution design, bringing the product and commercial view to their technical one.
• Own a one to three year roadmap of investments and retirements aligned to data protection regulation including GDPR and GxP, and to cloud adoption patterns across GSK.
• Lead vendor evaluation for data security and cloud/SaaS tooling.
• Manage vendor delivery and SLA performance for the platforms in scope.
• Track investment value against regulatory and threat coverage rather than delivery milestones alone.
• Own adoption as a coverage figure, including the share of the sanctioned SaaS estate under SSPM and the share of regulated data stores labelled and under Microsoft Purview policy, and act when a business unit opts out.
• Drive decommission and consolidation decisions across the product set.
• Run the product governance forum and keep decisions and rationale traceable for audit.
• Lead your team in using approved AI tools to improve productivity and ways of working, role-modelling responsible use and following GSK's Responsible AI, privacy and security requirements.
• Coach domain analysts and peers in product management practice, and prove value on a contained scope before scaling a capability across the estate.

What you'll need

• 15+ years in cyber security in a regulated environment, with a domain focus on security products for Data Security and Cloud/SaaS Security.
• End-to-end product ownership of Data Security and Cloud/SaaS security tools, including 1-3 year roadmaps aligned to GDPR, GxP and cloud adoption, with gap and duplication analysis driving consolidation.
• Vendor evaluation, selection and SLA management under a managed service with automated performance reporting, and data ingestion requirements for the data fabric validated for quality and completeness.
• Working in parallel with the Security Solution Engineering squad for Data Security and Cloud/SaaS Security, aligning use cases and roadmaps to build, test and vendor handover plans.
• Product ownership of AI data security controls, including DLP and classification for GenAI and copilots, AI-SPM and protection of data flowing into LLMs.
• Bachelor's degree in a relevant discipline, or equivalent professional experience.

Nice to have

• DLP, data classification, CSPM and CIEM tooling knowledge.
• Portfolio analytics and ROI modelling, including automated dashboards.
• Vendor governance rhythm including QBRs.
• Regulated industry experience, including GxP.
• Submitting new tooling to independent Design Assurance on the published intake route and resolving findings without negotiating the classification.

Details

• Location: Bengaluru, Luxor North Tower.
• Typical tools and technologies include Microsoft Purview, DLP, encryption and key management, CSPM, CASB, SSPM, ServiceNow and Power BI.