Job highlights

- You own pre-production review leadership for Tier 1 tools and are the primary technical reviewer for vendor deliverable assurance. . What makes this role different. You take the reviews nobody else can - Tier 1 tools and cross-domain designs where the security architecture is genuinely hard and the finding will be contested

- Preferred Qualifications

Job Summary

Senior individual contributor leading design assurance reviews for complex and high-risk tools across all domains - the most technically demanding reviews in the practice. You own pre-production review leadership for Tier 1 tools and are the primary technical reviewer for vendor deliverable assurance.

What makes this role different

You take the reviews nobody else can - Tier 1 tools and cross-domain designs where the security architecture is genuinely hard and the finding will be contested. That means real depth across cloud, network, platform and data security architecture, threat modelling you can run yourself, and the confidence to tell an expert architect their design does not meet a standard. You also lead vendor deliverable assurance, formally validating that what the managed service vendor configured matches the Cyber Architecture and Solutions design specification.

No line management; your authority comes entirely from the quality of the review.

Key Responsibilities

- Lead design assurance reviews for Tier 1 and high-risk tools across every Cyber Architecture and Solutions domain - cloud, network and Zero Trust, platform and detection, data security, application security, OT and AI.

- Run threat modelling and architecture risk assessment yourself on the designs you review, rather than relying on the submitting teams assessment.

- Act as primary technical reviewer for vendor deliverable assurance, validating that vendor-delivered platform configurations match the Cyber Architecture and Solutions design specification before acceptance.

- Take the reviews the domain analysts escalate: designs spanning more than one architecture domain, designs with no review precedent,



and any design where an analysts finding is formally contested by the submitting architect.

- Conduct independent architecture challenge on design outputs before they go to build, and tell an expert architect their design does not meet a standard when it does not.

- Set the review approach for designs that arrive without precedent, and have it adopted into the published methodology so a one-off judgement becomes a repeatable criterion rather than a private standard.

- Raise recurring findings to the owning architecture domain as a formal standards gap with the evidence attached, and re-test once the standard is amended - without drafting the amendment yourself.

- Record findings against a specific standard clause, classified Critical, High, Medium or Low, clearly enough that teams can act without further interpretation.

- Escalate contested findings rather than negotiating them away, and own them through to remediation close-out.

- Use approved AI tools in your day-to-day work to improve your own productivity and your teams ways of working, sharing what works and applying sound judgement, including validating outputs and following GSKs Responsible AI, privacy and security requirements.

- Mentor Design Assurance analysts on review technique and evidence quality, and review their findings before they are issued.

Basic Qualifications

- 10+ years in cyber security with deep security architecture expertise - domain focus: Design Assurance Tier 1 and cross-domain reviews

- Leading design assurance reviews of complex, high-risk Tier 1 tools across all domains, with personal accountability for review rigour and findings owned to close-out





- Vendor deliverable assurance - validating vendor-delivered configurations against the design specification and leading vendor acceptance testing, with automated drift detection

- Independent challenge of architecture designs before build, including from senior architects, and developing assessment criteria for AI tools, OT platforms and cloud-native services

- Leading design assurance of AI tools and agentic solutions - guardrails, tool-calling scope, data exposure and model risk - against AI security standards

Preferred Qualifications

- Experience holding a finding against an architect more senior than you, and the evidence trail that made it stick.

- Threat modelling and architecture risk assessment

- Scripting or policy-as-code for review evidence and drift checks

- Preparing evidence for internal or external audit, including GxP documentation

- Acting as the most senior reviewer in the practice, verifying against standards owned elsewhere

- Qualifications: Bachelors degree in a relevant discipline, or equivalent skilled experience.

- Typical tools and technologies: Architecture review and threat modelling, security design standards libraries, configuration review across cloud, network, platform and data security tooling, vendor deliverable assurance, evidence requirements and finding classification, GxP-compliant documentation.

Skills

- AI for Cybersecurity

- Application Security

- Architecture Governance

- Architecture Strategy

- Cloud Security

- Computer Programming

- Data Security

- Design Assurance

- Identity Access Management (IAM)

- Information Systems

- Infrastructure Security

- ML Security

- Operating Systems Security

- Scripting

- Security Architecture Design

- Security Engineering

- Security Technologies

- Security Testing

- Threat Modeling

- Vulnerability Management

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Principal - Design Assurance & Product Management - Pre-production (Bengaluru)
🏢 GSK India
📍 Bengaluru