Design Assurance and Product Management Lead

This role leads the Design Assurance and Product Management function, ensuring security is designed into solutions before they are built, and managing GSK's security capabilities as products. The role involves owning the Cyber Architecture and Solutions security product portfolio, vendor governance, and investment analytics.

Key responsibilities:

• Define, own, and continuously improve the Cyber Architecture and Solutions governance and quality framework
• Own and operate the independent design assurance process, making binding pass or fail determinations on vendor handover readiness
• Lead a 17-role function spanning Design Assurance, Security Product Management, and vendor and portfolio governance
• Own the Cyber Architecture and Solutions security product portfolio, including product roadmaps and lifecycle management
• Hold ultimate commercial accountability for vendor governance across the managed service
• Own Cyber Architecture and Solutions security risk and exception management at the most senior level
• Own Cyber Architecture and Solutions-wide metrics and security posture reporting
• Lead Cyber Architecture and Solutions engagement with internal audit, external regulators, and the second and third lines of defence
• Own portfolio intelligence and investment analytics
• Protect the independence of assurance when it is commercially or politically inconvenient
• Own the function's budget and the security tooling spend envelope it governs
• Lead the team in using approved AI tools to improve productivity and ways of working
• Set the technology and opportunity investment agenda for the portfolio

Basic Qualifications:

• 20+ years in cyber security, including 7+ in senior leadership in a regulated environment
• End-to-end product management of cyber security products
• Building and leading a cyber security product management practice
• Leading an independent Design Assurance practice and governing a security managed service
• Leading AI adoption across the portfolio and assurance

Preferred Qualifications:

• Architecture literacy to make binding quality judgements on expert architecture output
• Delivering enterprise security tool rationalisation with quantified savings
• Evidencing design and product governance to internal audit, external audit, and regulators
• Credibility with Board-level risk committees
• Commercial acumen , multi-year vendor contracts, TCO and cost-to-serve modelling