Job highlights

- Product or portfolio management certification (Pragmatic Institute,MSP or equivalent).

- Qualifications: Bachelors degree in a relevant discipline,or equivalent professional experience.

- Hold the boundary with Procurement and Legal explicitly: this role sets the commercial requirement and the performance case,Procurement negotiates and Legal contracts

- Preferred Qualifications

Job Summary

Job Purpose: Run day-to-day vendor governance for the managed service under delegated authority over SLA enforcement and service credits, escalating commercial breach to the function head. You own the security portfolio that sits behind it - the tool estate, its contracts and its renewal calendar - including oversight of platform support as it transitions to the vendor.

Domain focus: Portfolio-wide product governance and vendor management across all security product domains.

What makes this role different

This role is commercial and contractual as much as technical. You will hold a vendor to account on performance and cost for services GSK depends on, where your levers are contractual rather than direct operational control. The OTO transition for platform support happens on your watch, and the operational risk during it is real. If your background is running services rather than governing ones you do not control, that is the transition to be ready for.

Key Responsibilities

This role will provide you the opportunity to lead key activities to progress your career. These responsibilities include some of the following:

- Own vendor governance for the managed service as a whole: performance, SLA management, escalation and commercial levers.

- Run the vendor governance forums and keep decisions and rationale traceable.

- Own oversight of platform support as it moves into the function and transitions to the OTO model.





- Hold accountability for outcomes across more than 30 vendor-operated platforms and the data fabric, while the vendor operates them.

- Own the security portfolio view across products, projects and vendor services.

- Escalate systemic vendor issues rather than managing the same failure repeatedly.

- Hold the vendor to the delivery commitments in each domain product owners roadmap, and escalate missed milestones through the Vendor Governance Board rather than renegotiating them bilaterally.

- Bring vendor performance evidence - SLA attainment, service credit history and cost per platform - to the annual portfolio review so renewal decisions are made on evidenced delivery rather than incumbency.

- Hold the vendor relationship personally - you have no team, and your leverage is the contract, the governance forum and the evidence you bring to it.

- Support audit and regulatory evidence requests relating to vendor governance.

- Lead your team in using approved AI tools to improve productivity and ways of working, role-modelling responsible use and follow GSKs Responsible AI, privacy and security requirements.

- Hold the boundary with Procurement and Legal explicitly: this role sets the commercial requirement and the performance case, Procurement negotiates and Legal contracts.

Basic Qualifications

- 15+ years in cyber security in a regulated workplace - domain focus: portfolio-wide product governance and vendor management across all security product domains

- Operating vendor governance beneath a product management operating model - SLA regime design, service credit mechanics,



escalation ladders and QBR and EBC cadence across a multi-tower managed service.

- Translating threat and risk intelligence into capability investment decisions, running the annual portfolio review with a product owner, business case and renewal decision for every tool

- Chairing the Vendor Governance Board - SLA performance, commercial management and relationship health - with automated reporting and acting as primary interface to Procurement

- Governing AI-enabled security products and vendors use of AI - AI feature claims, data usage terms and AI risk in contracts

Preferred Qualifications

- Product management discipline - roadmaps, adoption metrics and decommission business cases

- Portfolio analytics, licence utilisation and renewal calendar management, with dashboards and renewal alerts automated

- Product or portfolio management certification (Pragmatic Institute, MSP or equivalent)

- Regulated industry experience, including GxP

- Stakeholder management across CISO, Procurement and domain product owners

- Qualifications: Bachelors degree in a relevant discipline, or equivalent professional experience.

- Typical tools and technologies: Vendor performance and SLA reporting, contract and renewal management, governance forums with QBR and EBC packs, service credit and commercial mechanics, ServiceNow, portfolio and product management platforms, Power BI for vendor and portfolio reporting.

Skills

- AI tools

- Vendor Management

- Product Governance

- SLA Management

- ServiceNow

- Power BI

- Procurement Negotiations

- Contract Negotiations

- Portfolio Management

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Senior Principal (Bengaluru)
🏢 GSK India
📍 Bengaluru