# Domain Analyst - Design Assurance for Application Security, Data Security and Cloud Security

**Company**: GlaxoSmithKline (GSK)
**Location**: Bengaluru
**Experience**: senior
**Job type**: full-time
**Category**: Security
**Industry**: Healthcare

**Apply**: https://gsk.wd5.myworkdayjobs.com/en-US/GSKCareers/job/Bengaluru-Luxor-North-Tower/Lead-Analyst--Design-Assurance---Product-Management---Application-Security_450129?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/job/domain-analyst-design-assurance-for-application-e279fec7-1ac/

## Description

We are seeking a Domain Analyst to cover Application Security, Data Security, and Cloud Security, with ownership of the Design Assurance register.

The successful candidate will perform pre-production and BAU reviews for tooling in these domains, maintain the register, and report assurance coverage.

Key responsibilities:

- Perform pre-production reviews for application security tooling, including SAST, DAST, and SCA

- Review data security tooling, including DLP and data classification

- Review cloud security tooling and landing-zone configurations against cloud security standards

- Maintain the assurance register and record review records

- Run pre-production and business-as-usual reviews across Application Security, Data Security, and Cloud Security

- Escalate cross-domain and precedent-setting designs to senior review

- Record findings against specific clauses of security standards and track to closure

- Validate vendor-delivered toolchain configurations against secure SDLC integration patterns

- Flag recurring findings as candidate standards gaps for escalation

- Prepare review packs and evidence for governance forums

- Support audit and regulatory evidence requests

Basic Qualifications:

- 10+ years in cyber security, with a domain focus on Design Assurance for Application Security, Data Security, and Cloud Security

- Experience with pre-production design assurance reviews of Application Security, Data Security, and Cloud Security tooling

- Knowledge of reviewing SAST, DAST, SCA, DLP, data classification, CSPM, and CIEM configurations against standards

- Experience with owning an assurance register and tracking findings

Preferred Qualifications:

- SDLC integration and API security controls

- Encryption management and data access governance

- Multi-cloud security control consistency

- GxP-compliant documentation practice

- Reviewing API security controls and secrets handling in CI/CD pipelines

For more fresh new jobs, check out [yubhub.co](https://yubhub.co/).

## Skills

### Required
- Application Security
- Cloud Security
- Data Security
- Design Assurance
- Identity Access Management (IAM)
- Information Systems
- Infrastructure Security
- Security Engineering
- Security Technologies
- Security Testing
- Vulnerability Management

### Nice to have
- SDLC integration
- API security controls
- Encryption management
- Data access governance
- Multi-cloud security control consistency
- GxP-compliant documentation practice

---

Source: [Apply at gsk.wd5.myworkdayjobs.com](https://gsk.wd5.myworkdayjobs.com/en-US/GSKCareers/job/Bengaluru-Luxor-North-Tower/Lead-Analyst--Design-Assurance---Product-Management---Application-Security_450129?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)