Job highlights

- Qualifications: Bachelors degree in a relevant discipline,or equivalent professional experience.

- Define the governance gates an AI capability must pass before build,release or vendor handover.

- Preferred Qualifications

Job Purpose

Job Purpose: Own the AI security standards library and the architecture governance framework for Cyber Architecture and Solutions. This role owns standards and governance rather than solution design, which sits with AI Architecture. You run the quality reviews that confirm what Engineering built matches what Architecture specified, own the architecture decision log, and maintain the AI threat model library.

The standards you write are binding on AI initiatives well beyond Cyber Architecture and Solutions.

About the team

AI ML and Cloud Security is the function through which GSK is transforming security itself. The team designs and builds the agentic framework, a multi-agent platform moving security services across the Chief Security Office from rule-based to AI-driven operation. It owns AI architecture and AI engineering end to end: the agent layer, LLM orchestration, the AI and ML platform, and the data fabric pipeline that Cyber Architecture and Solutions designs, builds and tests before a managed service vendor operates it.

The team also governs AI tool security posture, advises on cloud security across the Azure and GCP estate, and is the front door between GSKs business units and RD and the technical AI function. AI security standards set here are binding on every AI initiative in GSK. Seventeen roles across the UK, India and the US.

What makes this role different

This is the quality gate on GSKs AI work. It suits someone who writes with real precision and enjoys building the framework rather than shipping the feature - the value shows up as problems that never happened. You need enough hands-on AI depth to tell a genuine control from a plausible-sounding one, because vendors and internal teams will present both. If you want to be building agents, apply for the engineering roles instead.

Key responsibilities

This role will provide you the opportunity to lead key activities to progress your career.



These responsibilities include some of the following:

- Develop and maintain the AI security standards library and the architecture governance framework.

- Run architecture quality reviews validating that Engineering builds match approved specifications.

- Own the architecture decision log so design rationale stays traceable for audit and regulatory inspection.

- Build and maintain the AI threat model library: prompt injection including indirect, training data poisoning, model extraction, adversarial input, agent privilege escalation.

- Translate the EU AI Act, NIST AI RMF and ISO/IEC 42001 into practical architectural requirements rather than restating them.

- Define the governance gates an AI capability must pass before build, release or vendor handover.

- Hold office hours for the engineering teams and turn the three most-asked questions each quarter into new pattern guidance, so the same exception is not requested twice.

- Support assurance, audit and regulatory evidence requests from the governance framework.

- Re-baseline the standards library against each new OWASP Top 10 for LLM Applications revision, NIST AI RMF profile and EU AI Act implementing act within 60 days of publication.

- Mentor colleagues on standards and governance practice.

- Lead your team in using approved AI tools to improve productivity and ways of working, role-modelling responsible use and follow GSKs ;Responsible AI, privacy and security requirements.

- Own the standards roadmap - which standards are being written, revised or retired, and by when - so the library stays ahead of the build rather than behind it.

Basic Qualifications

- 15+ years in cyber security in a regulated environment - domain focus: AI Architecture Standards (AI security standards,



AI threat modelling and model/agent risk tiering)

- Building and maintaining the enterprise AI security standards library, translating the EU AI Act, NIST AI RMF and ISO/IEC 42001 into practical, enforceable architectural requirements

- AI threat model library and risk-tiering methodology - direct and indirect prompt injection, training-data poisoning, model extraction, adversarial input and agent misuse - mapped to MITRE ATLAS and OWASP LLM Top 10

- Running AI architecture governance - reviews, conformance, exceptions and quality reviews validating engineering builds against approved specifications, with gates before build, release or vendor handover

- Owning the architecture decision log so AI design rationale is traceable for audit and regulatory inspection, with policy-as-code conformance checks where possible

Preferred Qualifications

- EU AI Act, NIST AI RMF and ISO/IEC 42001 working knowledge

- GxP and data integrity requirements applied to AI systems

- Evidencing AI governance to internal audit or regulators

- Rego and OPA or Azure Policy authoring, so conformance checks run in the pipeline rather than in a review meeting.

- AI red-teaming and adversarial testing methods used to validate standards

- Qualifications: Bachelors degree in a relevant discipline, or equivalent qualified experience.

- Typical tools and technologies: AI security standards authoring, AI threat modelling using MITRE ATLAS and STRIDE adapted for machine learning, model and agent risk tiering frameworks, EU AI Act, NIST AI RMF and ISO/IEC 42001, OWASP Top 10 for LLM Applications, architecture decision records and conformance review, GxP-compliant documentation and evidence management.

Skills

- AI Architecture

- AI for Cybersecurity

- Threat Modeling

- Threat Modeling for AI Systems

- AI System Design

- Cloud Security

- Security Engineering

- Security Testing

- Data Security

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Senior Principal - AI ML and Cloud Security (Bengaluru)
🏢 GSK India
📍 Bengaluru