# Senior Principal - Design Assurance & Product Management - Security Products at GSK

GSK is hiring a Senior Principal - Design Assurance & Product Management - Security Products for a remote role open to applicants in India. Level rates it Little AI ●○○○; you can [apply on GSK](https://jobsbylevel.com/go/585ce0b4-9f1b-4f42-ab5f-bbe3f385cf2d?utm_medium=ai-agent).

AI Level 1, AI centrality 19 out of 100. Remote (Bengaluru Luxor North Tower).

## Details

- Company: [GSK](https://jobsbylevel.com/companies/gsk)
- AI level: AI Level 1 (score 19 out of 100)
- Location: Remote (Bengaluru Luxor North Tower)
- Posted: November 9, 2026
- Apply: https://jobsbylevel.com/go/585ce0b4-9f1b-4f42-ab5f-bbe3f385cf2d?utm_medium=ai-agent
- Free CV review for this job: https://jobsbylevel.com/cv-review?job=senior-principal-design-assurance-product-management-security-products-at-gsk-fbbab7

## Description

GSK remains committed to achieving bold commercial ambitions for the future. By 2031, we aim to deliver £40 billion in annual sales, leveraging our existing strong performance momentum to significantly increase our positive impact on the health of billions of patients globally. Our Ahead Together strategy is centred on early intervention to prevent and alter the course of disease, thereby protecting people and supporting healthcare systems. Our diverse portfolio consists of vaccines, specialty medicines, and general medicines. Through continuous innovation and a dedicated focus on scientific and technical excellence, we strive to develop and launch new, groundbreaking treatments that address critical health challenges. Domain focus: Security products for Data Security and Cloud/SaaS Security. Job Purpose: End-to-end product owner for the Data Security and Cloud/SaaS security tool domains. You run the full product lifecycle: translating threat intelligence and compliance requirements into capability use cases, coordinating with Security Architecture on solution design, leading vendor evaluation, tracking investment value against regulatory and threat coverage, and driving decommission decisions. About the team : Design Assurance and Product Management makes sure security is designed in before anything is built, and that GSK's security capabilities are run as products rather than projects. Design Assurance independently verifies that solutions meet the architecture standards set elsewhere in Cyber Architecture and Solutions; it writes none of those standards, and that separation is what makes the review worth anything. Product Management owns the security portfolio, vendor governance and investment analytics, and is how GSK manages its managed service vendor as a whole. Platform support engineering moves into this function, with a small internal team retaining oversight while the vendor operates more than 30 platforms and the data fabric under an OTO model. Seventeen roles. What makes this role different. Your controls sit directly on regulated personal and clinical data, so a DLP policy change is a privacy decision as well as a security one and you will defend the roadmap to the Data Protection Office and to GxP quality as often as to the CISO. The threat driver is identity rather than perimeter — OAuth consent abuse, over-permissioned service principals and token theft against SaaS tenants — which is why CIEM entitlement reduction and SSPM drift sit ahead of new detection content. You own the product and the investment; Data Security Architecture owns the standards. Key responsibilities: This role will provide you the opportunity to lead key activities to progress your career. These responsibilities include some of the following: Own the end-to-end product lifecycle for the Data Security and Cloud/SaaS security tool domains. Translate data security threat intelligence and compliance requirements into capability use cases. Coordinate with Security Architecture on solution design, bringing the product and commercial view to their technical one. Own a one to three year roadmap of investments and retirements aligned to data protection regulation including GDPR and GxP, and to cloud adoption patterns across GSK. Lead vendor evaluation for data security and cloud/SaaS tooling. Manage vendor delivery and SLA performance for the platforms in scope. Track investment value against regulatory and threat coverage rather than delivery milestones alone. Own adoption as a coverage figure — the share of the sanctioned SaaS estate under SSPM, and the share of regulated data stores labelled and under Microsoft Purview policy — and act when a business unit opts out. Drive decommission and consolidation decisions across the product set. Run the product governance forum and keep decisions and rationale traceable for audit. Lead your team in using approved AI tools to improve productivity and ways of working, role-modelling responsible use and

The description is cut here. Read the full offer: https://jobsbylevel.com/jobs/senior-principal-design-assurance-product-management-security-products-at-gsk-fbbab7

Source: https://jobsbylevel.com/jobs/senior-principal-design-assurance-product-management-security-products-at-gsk-fbbab7

## Cite this page

Level. https://jobsbylevel.com/jobs/senior-principal-design-assurance-product-management-security-products-at-gsk-fbbab7.

Get job alerts: https://jobsbylevel.com/newsletter
