# AI Business Facing (AI use-case intake and governance for business unit portfolios)

**Company**: GlaxoSmithKline (GSK)
**Location**: Bengaluru
**Experience**: senior
**Job type**: full-time
**Category**: IT
**Industry**: Healthcare

**Apply**: https://gsk.wd5.myworkdayjobs.com/en-US/GSKCareers/job/Bengaluru-Luxor-North-Tower/Associate-Director---AI-ML-and-Cloud-Security---AI-Business_450138?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/job/ai-business-facing-ai-use-case-intake-and-6f92fb5d-10d/

## Description

Manage AI use-case intake and governance for defined business unit portfolios. You own the use-case pipeline register from intake through triage to handoff, track governance status, and develop the AI governance playbooks that let business teams self-serve rather than queueing for Cyber Architecture and Solutions advice.

Key responsibilities:

- Own AI use-case intake and governance for defined business unit portfolios , running each proposal to a recorded decision inside an agreed service level.

- Maintain the use-case pipeline register from intake through triage to handoff, and keep it accurate enough to be the single source of truth.

- Apply EU AI Act classification and AI risk and prioritisation scoring to each proposal, including for use cases in GxP-validated contexts.

- Track governance status per use case and chase the architecture, security and Responsible AI decisions that unblock them.

- Coordinate with AI Architecture on feasibility and with AI Security on model and agent risk assessment.

- Develop AI governance playbooks , intake criteria, data handling rules and approval routes , that business teams can apply themselves.

- Run business-side shadow AI discovery alongside the technical discovery programme, and bring findings into the register.

- Support AI security awareness activity for business leaders and translate technical requirements into language they will act on.

- Escalate use cases that cannot meet the security standards rather than progressing them informally.

- Publish the monthly AI portfolio view the Director takes to the Responsible AI council , proposals in flight, decisions overdue, and the shadow AI tools found that month.

- Lead your team in using approved AI tools to improve productivity and ways of working, role-modelling responsible use and follow GSK's Responsible AI, privacy and security requirements.

- Own the design of the AI use-case intake service , the decision rights, the service levels and the outcome measures it is judged on , rather than only operating it.

- Set and report the value and outcome measures for the approved use-case portfolio, so the intake service is held to benefit delivered as well as risk avoided.

Basic Qualifications:

- 15+ years in cyber security, AI governance or technology risk in a regulated environment , domain focus: AI Business Facing (AI use-case intake and governance for business unit portfolios)

- Running AI use-case intake and governance , owning the use-case pipeline register from intake to handoff, tracking governance status and chasing blocking decisions, with automated intake and status tracking

- Assessing AI use cases for security, data classification, model risk and regulatory impact, coordinating feasibility with AI Architecture and risk assessment with AI Security before routing to engineering

- Business-side shadow AI discovery alongside technical discovery, driving remediation of unsanctioned AI tools and copilots through engagement

- Translating GenAI, LLM and agent risks (data leakage, prompt injection, hallucination, IP exposure) into plain-language guidance and governance playbooks business teams can apply themselves

Preferred Qualifications:

- AI governance frameworks , EU AI Act, NIST AI RMF and ISO/IEC 42001

- AI risk assessment and prioritisation , plus workflow automation or low-code tooling

- Regulated industry experience, including GxP

- Executive stakeholder exposure and influencing without authority

- ServiceNow or Power Apps workflow build, so intake is a form with validation rules rather than an inbox.

For more fresh new jobs, check out [yubhub.co](https://yubhub.co/).

## Skills

### Required
- AI for Cybersecurity
- AI Platforms
- Application Security
- Cloud Application Security
- Cloud Security
- Computer Programming
- Data Security
- Google Cloud Platform (GCP)
- Identity Access Management (IAM)
- Information Systems
- Infrastructure Security
- Kubernetes
- ML Security
- Operating Systems Security
- Scripting
- Security Engineering
- Security Technologies
- Security Testing
- Vector Databases
- Vulnerability Management

### Nice to have
- AI governance frameworks
- AI risk assessment and prioritisation
- Regulated industry experience
- Executive stakeholder exposure and influencing without authority
- ServiceNow or Power Apps workflow build

---

Source: [Apply at gsk.wd5.myworkdayjobs.com](https://gsk.wd5.myworkdayjobs.com/en-US/GSKCareers/job/Bengaluru-Luxor-North-Tower/Associate-Director---AI-ML-and-Cloud-Security---AI-Business_450138?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)