# Senior Individual Contributor - Design Assurance for Cryptography & PQC and AI Security

**Company**: GlaxoSmithKline (GSK)
**Location**: Bengaluru
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Healthcare

**Apply**: https://gsk.wd5.myworkdayjobs.com/en-US/GSKCareers/job/Bengaluru-Luxor-North-Tower/Principal---Design-Assurance---Product-Management---Cryptography---PQC_450127?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/job/senior-individual-contributor-design-assurance-for-1d630720-020/

## Description

We are seeking a Senior Individual Contributor to own the Design Assurance methodology library and perform specialist domain reviews in niche areas including cryptography and AI security.

The successful candidate will have two distinct responsibilities: owning the Design Assurance methodology library, and performing specialist domain reviews in cryptography and post-quantum, and AI security.

**Key Responsibilities:**

- Own the Design Assurance methodology library: review templates, assessment scoring criteria, evidence requirements and finding classification.

- Run the annual methodology calibration: re-score a sample of closed reviews across reviewers to prove that a High finding means the same thing whoever raised it, and correct the criteria where it does not.

- Perform specialist domain reviews in niche areas including cryptography and AI, where generalist review is not credible.

- Translate new or changed architecture standards into assessment criteria the practice can apply consistently.

- Develop assessment approaches for emerging technology types before they arrive in the review queue.

- Advise reviewers on how to apply the methodology in ambiguous cases.

- Convert published architecture standards into assessment criteria, and return ambiguity in a standard to its owning domain as a defect rather than resolving it by writing the missing wording.

- Record findings clearly enough to be acted on without further interpretation.

- Escalate contested findings rather than negotiating them away.

- Mentor analysts on methodology and review practice.

- Use approved AI tools in your day-to-day work to improve your own productivity and your team's ways of working, sharing what works and applying sound judgement, including validating outputs and following GSK's Responsible AI, privacy and security requirements.

- Hold assurance evidence to GxP and data integrity expectations, so the review record stands up to audit and regulatory inspection.

**Basic Qualifications:**

- 10+ years in cyber security , domain focus: Design Assurance for Cryptography & PQC and AI Security

- Owning the DA methodology library and vendor assurance playbook , templates, scoring, evidence requirements, finding classification, test scenarios and acceptance criteria , automated where possible

- Leading design assurance reviews for Cryptography & PQC, validating control implementations and migration outputs against architecture standards

- Leading design assurance reviews for AI Security , prompt-injection defences, guardrails, model access, agent tool-calling scope and AI data protection

- Senior review lead for complex and cross-domain reviews, peer-reviewing analyst outputs and running in-life health checks on critical tools

**Preferred Qualifications:**

- Cryptography, key management and PQC migration knowledge

- AI platform security controls and threat modelling

- Assurance and control-assessment frameworks , ISO 27001 Annex A, NIST CSF and NIST SP 800-53 , applied as review criteria rather than cited as background.

- Scripting or tooling to automate review evidence and template maintenance

- Updating Design Assurance assessment criteria whenever architecture standards change

- Qualifications: Bachelor's degree in a relevant discipline, or equivalent professional experience

For more fresh new jobs, check out [yubhub.co](https://yubhub.co/).

## Skills

### Required
- AI for Cybersecurity
- Application Security
- Cloud Security
- Computer Programming
- Cryptography
- Data Security
- Design Assurance
- Identity Access Management (IAM)
- Information Systems
- Infrastructure Security
- In-Process Quality Control (IPQC)
- ML Security
- Operating Systems Security
- Platform Security
- Scripting
- Security Engineering
- Security Technologies
- Security Testing
- Threat Modeling
- Vulnerability Management

### Nice to have
- key management
- PQC migration
- AI platform security controls
- threat modelling
- ISO 27001 Annex A
- NIST CSF
- NIST SP 800-53
- tooling

---

Source: [Apply at gsk.wd5.myworkdayjobs.com](https://gsk.wd5.myworkdayjobs.com/en-US/GSKCareers/job/Bengaluru-Luxor-North-Tower/Principal---Design-Assurance---Product-Management---Cryptography---PQC_450127?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)