# Senior Cyber Security Design Assurance Lead

**Company**: GlaxoSmithKline (GSK)
**Location**: Bengaluru
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Healthcare

**Apply**: https://gsk.wd5.myworkdayjobs.com/en-US/GSKCareers/job/Bengaluru-Luxor-North-Tower/Associate-Director---Design-Assurance---Product-Management---Independent-Design-Assurance_450134?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/job/senior-cyber-security-design-assurance-lead-4fa0674f-54f/

## Description

Lead the Design Assurance practice, an eight-role team, as the most senior independent reviewer in Cyber Architecture and Solutions. You own the assurance methodology, review standards and assurance register, and manage reviewer capacity against demand. Accountable for pre-production architecture review, technical consultation and BAU design assurance.

Key responsibilities:

- Lead the Design Assurance practice of eight and own its capability plan across every Cyber Architecture and Solutions domain, including Cryptography and PQC and AI Security.

- Issue binding go/no-go determinations on tools before production, and own the consequences when a programme with a committed date does not get the answer it wanted.

- Approve the assurance methodology, review standards and the Critical, High, Medium and Low classification scheme, and defend both under audit.

- Verify against architecture standards set elsewhere in Cyber Architecture and Solutions and write none of them, because that separation is what makes the assurance opinion worth anything.

- Manage reviewer capacity and tiering so high-risk designs get full review and low-risk change moves through pattern-based self-attestation with sampling.

- Assure vendor-delivered designs to exactly the same standard as internally delivered ones, including configuration handed over under the managed service model.

- Own pre-production architecture review, technical consultation and BAU design assurance across the estate.

- Feed recurring findings back to the architecture domains as standards gaps rather than reviewing the same defect repeatedly.

- Own assurance throughput, turnaround, first-time-pass and defect escape metrics, and defend them under challenge.

- Lead the practice's response to internal audit and regulatory inspection, including the evidence that reviews operated rather than merely existed.

- Lead your team in using approved AI tools to improve productivity and ways of working, role-modelling responsible use and follow GSK's Responsible AI, privacy and security requirements.

Basic Qualifications:

- 15+ years in cyber security, including leading technical or specialist teams , domain focus: independent Design Assurance across all Cyber Architecture and Solutions security domains, including Cryptography and AI Security

- Leading an independent design assurance practice , methodology, review standards and assurance register , issuing binding go/no-go decisions on tools pre-production and in BAU

- Protecting independence from architecture under programme pressure , verifying against standards owned elsewhere, never writing them, and assuring vendor-delivered designs to the same standard as internal ones

- Sponsoring automation of review intake, evidence capture, drift checks and reporting, managing reviewer capacity against demand and feeding recurring findings back as standards gaps

- Assuring AI-enabled tools and agentic solutions against AI security standards, and using AI to accelerate review and evidence capture

Preferred Qualifications:

- Architecture literacy to challenge senior architects' designs without owning the standards

- Evidencing assurance to internal audit and regulators, including GxP documentation standards , using automated evidence capture and reporting

- Developing and leading a team of senior reviewers and analysts

- Executive stakeholder influence , holding a contested finding with senior leaders

- Experience defending an assurance opinion to an audit committee or a regulator when the first line disagreed with it.

For more fresh new jobs, check out [yubhub.co](https://yubhub.co/).

## Skills

### Required
- AI Agent Security
- AI for Cybersecurity
- Application Security
- Central Authentication Service (CAS)
- Cloud Security
- Computer Programming
- Cryptography
- Data Security
- Design Assurance
- Identity Access Management (IAM)
- Independent Decision-Making
- Information Systems
- Infrastructure Security
- ML Security
- Operating Systems Security
- Scripting
- Security Engineering
- Security Technologies
- Security Testing
- Vulnerability Management

---

Source: [Apply at gsk.wd5.myworkdayjobs.com](https://gsk.wd5.myworkdayjobs.com/en-US/GSKCareers/job/Bengaluru-Luxor-North-Tower/Associate-Director---Design-Assurance---Product-Management---Independent-Design-Assurance_450134?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)