End-to-end Product Owner for Data Security and Cloud/SaaS Security Tool Domains

We are seeking an End-to-end Product Owner for the Data Security and Cloud/SaaS security tool domains.

As a Product Owner, you will be responsible for running the full product lifecycle, translating threat intelligence and compliance requirements into capability use cases, coordinating with Security Architecture on solution design, leading vendor evaluation, tracking investment value against regulatory and threat coverage, and driving decommission decisions.

Key Responsibilities:

• Own the end-to-end product lifecycle for the Data Security and Cloud/SaaS security tool domains.
• Translate data security threat intelligence and compliance requirements into capability use cases.
• Coordinate with Security Architecture on solution design, bringing the product and commercial view to their technical one.
• Own a one to three year roadmap of investments and retirements aligned to data protection regulation including GDPR and GxP, and to cloud adoption patterns across GSK.
• Lead vendor evaluation for data security and cloud/SaaS tooling.
• Manage vendor delivery and SLA performance for the platforms in scope.
• Track investment value against regulatory and threat coverage rather than delivery milestones alone.
• Own adoption as a coverage figure , the share of the sanctioned SaaS estate under SSPM, and the share of regulated data stores labelled and under Microsoft Purview policy , and act when a business unit opts out.
• Drive decommission and consolidation decisions across the product set.
• Run the product governance forum and keep decisions and rationale traceable for audit.
• Lead your team in using approved AI tools to improve productivity and ways of working, role-modelling responsible use and follow GSK's Responsible AI, privacy and security requirements.
• Coach domain analysts and peers in product management practice, and prove value on a contained scope before scaling a capability across the estate.

Basic Qualifications:

• 15+ years in cyber security in a regulated environment , domain focus: security products for Data Security and Cloud/SaaS Security
• End-to-end product ownership of Data Security and Cloud/SaaS security tools , 1-3 year roadmaps aligned to GDPR, GxP and cloud adoption, with gap and duplication analysis driving consolidation
• Vendor evaluation, selection and SLA management under a managed service with automated performance reporting, and data ingestion requirements for the data fabric validated for quality and completeness
• Working in parallel with the Security Solution Engineering squad for Data Security and Cloud/SaaS Security , aligning use cases and roadmaps to build, test and vendor handover plans
• Product ownership of AI data security controls , DLP and classification for GenAI and copilots, AI-SPM and protection of data flowing into LLMs

Preferred Qualifications:

• DLP, data classification, CSPM and CIEM tooling knowledge
• Portfolio analytics and ROI modelling , including automated dashboards
• Vendor governance rhythm including QBRs
• Regulated industry experience, including GxP
• Submitting new tooling to independent Design Assurance on the published intake route and resolving findings without negotiating the classification.
• Qualifications: Bachelor's degree in a relevant discipline, or equivalent professional experience.
• Typical tools and technologies: Data security tooling including Microsoft Purview, DLP and encryption and key management, cloud and SaaS security tooling across CSPM, CASB and SSPM, product roadmapping and adoption metrics, GDPR and GxP compliance drivers, vendor evaluation and proof-of-value, ServiceNow, Power BI.