# Principal - Design Assurance & Product Management - Cryptography & PQC at GSK

GSK is hiring a Principal - Design Assurance & Product Management - Cryptography & PQC for a remote role open to applicants in India. Level rates it Little AI ●○○○; you can [apply on GSK](https://jobsbylevel.com/go/e645c1ab-21c1-48d5-a5ea-cc91a1dc9558?utm_medium=ai-agent).

AI Level 1, AI centrality 34 out of 100. Remote (Bengaluru Luxor North Tower).

## Details

- Company: [GSK](https://jobsbylevel.com/companies/gsk)
- AI level: AI Level 1 (score 34 out of 100)
- Location: Remote (Bengaluru Luxor North Tower)
- Posted: November 9, 2026
- Apply: https://jobsbylevel.com/go/e645c1ab-21c1-48d5-a5ea-cc91a1dc9558?utm_medium=ai-agent
- Free CV review for this job: https://jobsbylevel.com/cv-review?job=principal-design-assurance-product-management-cryptography-pqc-at-gsk-758159

## Description

GSK remains committed to achieving bold commercial ambitions for the future. By 2031, we aim to deliver £40 billion in annual sales, leveraging our existing strong performance momentum to significantly increase our positive impact on the health of billions of patients globally. Our Ahead Together strategy is centred on early intervention to prevent and alter the course of disease, thereby protecting people and supporting healthcare systems. Our diverse portfolio consists of vaccines, specialty medicines, and general medicines. Through continuous innovation and a dedicated focus on scientific and technical excellence, we strive to develop and launch new, groundbreaking treatments that address critical health challenges. Domain focus: Design Assurance for Cryptography & PQC and AI Security. Job Purpose : Senior individual contributor with two distinct responsibilities: owning the Design Assurance methodology library, and performing the specialist domain reviews nobody else in the practice can cover — cryptography and post-quantum, and AI security. About the team : Design Assurance and Product Management makes sure security is designed in before anything is built, and that GSK's security capabilities are run as products rather than projects. Design Assurance independently verifies that solutions meet the architecture standards set elsewhere in Cyber Architecture and Solutions; it writes none of those standards, and that separation is what makes the review worth anything. Product Management owns the security portfolio, vendor governance and investment analytics, and is how GSK manages its managed service vendor as a whole. Platform support engineering moves into this function, with a small internal team retaining oversight while the vendor operates more than 30 platforms and the data fabric under an OTO model. Seventeen roles. What makes this role different. Two distinct jobs in one role. You own the Design Assurance methodology library — review templates, scoring criteria, evidence requirements and finding classification — and keep it current as architecture standards change. Alongside that you are the specialist reviewer for the two domains nobody else can cover: cryptography, including key management, HSM, PKI and TLS review and the post-quantum migration to CRYSTALS-Kyber and CRYSTALS-Dilithium; and AI security, reviewing against MITRE ATLAS and the OWASP Top 10 for LLM Applications. Depth in one of those two is essential; depth in both is rare and will stand out. Key responsibilities: This role will provide you the opportunity to lead key activities to progress your career. These responsibilities include some of the following: Own the Design Assurance methodology library: review templates, assessment scoring criteria, evidence requirements and finding classification. Run the annual methodology calibration: re-score a sample of closed reviews across reviewers to prove that a High finding means the same thing whoever raised it, and correct the criteria where it does not. Perform specialist domain reviews in niche areas including cryptography and AI, where generalist review is not credible. Translate new or changed architecture standards into assessment criteria the practice can apply consistently. Develop assessment approaches for emerging technology types before they arrive in the review queue. Advise reviewers on how to apply the methodology in ambiguous cases. Convert published architecture standards into assessment criteria, and return ambiguity in a standard to its owning domain as a defect rather than resolving it by writing the missing wording. Record findings clearly enough to be acted on without further interpretation. Escalate contested findings rather than negotiating them away. Mentor analysts on methodology and review practice. Use approved AI tools in your day-to-day work to improve your own productivity and your team's ways of working, sharing what works and applying sound judgement, including validating outputs

The description is cut here. Read the full offer: https://jobsbylevel.com/jobs/principal-design-assurance-product-management-cryptography-pqc-at-gsk-758159

Source: https://jobsbylevel.com/jobs/principal-design-assurance-product-management-cryptography-pqc-at-gsk-758159

## Cite this page

Level. https://jobsbylevel.com/jobs/principal-design-assurance-product-management-cryptography-pqc-at-gsk-758159.

Get job alerts: https://jobsbylevel.com/newsletter