Lead the Design Assurance practice, overseeing independent review of cyber architecture and solutions, managing capacity, and ensuring compliance with security standards.
Responsibilities
Lead the Design Assurance practice of eight and own its capability plan across every Cyber Architecture and Solutions domain
Issue binding go/no-go determinations on tools before production
Approve the assurance methodology, review standards and the Critical, High, Medium and Low classification scheme
Verify against architecture standards set elsewhere in Cyber Architecture and Solutions
Manage reviewer capacity and tiering for high-risk designs
Requirements
Bachelor's degree in a relevant discipline, or equivalent professional experience
Own Security Solution Engineering: an eight-role team that builds, tests and packages the solutions every architecture domain specifies before they transfer to a managed service vendor to operate.
Responsibilities
Own build, test and packaging across all security domains, leading seven engineers across four squads.
Own the quality of vendor handover packages: a managed service must be able to operate what you built without Cyber Architecture and Solutions present.
Build to the specifications the architecture domains set, escalating design problems rather than reinterpreting them.
Own acceptance against the architecture specification and the operational readiness, refuse handover where test evidence does not cover.
Own engineering standards, reusable build components and the solution testing library.
Requirements
Bachelor's degree in a relevant discipline or equivalent professional experience
Domain analyst covering Network & Zero Trust, Platform Security, and MDR & Detection Engineering, performing pre-production and BAU reviews, validating configurations against architecture standards.
Responsibilities
Perform pre-production reviews for network security and Zero Trust tooling
Review SIEM, SOAR and EDR/XDR platform configurations
Review detection engineering outputs
Run pre-production and business-as-usual reviews across domains
Record findings against standard clauses
Requirements
Bachelor's degree in a relevant discipline or equivalent professional experience
Senior individual contributor responsible for owning the Design Assurance methodology library and performing specialist domain reviews in cryptography, post-quantum, and AI security.
Responsibilities
Own the Design Assurance methodology library: review templates, assessment scoring criteria, evidence requirements and finding classification.
Run the annual methodology calibration: re-score a sample of closed reviews across reviewers to prove consistency.
Perform specialist domain reviews in niche areas including cryptography and AI.
Translate new or changed architecture standards into assessment criteria the practice can apply consistently.
Develop assessment approaches for emerging technology types before they arrive in the review queue.
Requirements
Bachelor's degree in a relevant discipline, or equivalent professional experience
Nice to have: Cryptography, key management and PQC migration knowledge
Nice to have: AI platform security controls and threat modelling
Nice to have: Assurance and control-assessment frameworks
Nice to have: Scripting or tooling to automate review evidence and template maintenance
Lead design assurance reviews for Tier 1 and high‑risk cyber security tools across all domains, acting as the primary technical reviewer for vendor deliverable assurance and independent architecture challenge.
Responsibilities
Lead design assurance reviews for Tier 1 and high‑risk tools across all domains
Run threat modelling and architecture risk assessment
Act as primary technical reviewer for vendor deliverable assurance
Take reviews of designs spanning multiple domains or with no precedent
Conduct independent architecture challenge on design outputs
Requirements
Bachelor's degree in a relevant discipline or equivalent professional experience
Lead the design assurance and product management function for GSK’s Cyber Architecture & Solutions portfolio, ensuring security solutions meet quality and compliance standards before vendor handover.
Responsibilities
Define and continuously improve the Cyber Architecture and Solutions governance and quality framework
Own and operate the independent design assurance process, making binding pass or fail determinations on vendor handover readiness
Lead a 17-role function spanning Design Assurance, Security Product Management, and vendor and portfolio governance
Own the Cyber Architecture and Solutions security product portfolio and its lifecycle
Hold ultimate commercial accountability for vendor governance across the managed service
Requirements
Bachelor's degree in a relevant discipline or equivalent professional experience