Lead Analyst, Design Assurance & Product Management - Application Security
GSK · Posted Nov 9, 2026
- Bengaluru, Karnataka, India
- 10+ years
Domain analyst covering Application Security, Data Security and Cloud Security, plus ownership of the Design Assurance register.
Responsibilities
- Perform pre-production reviews for application security tooling including SAST, DAST and SCA, validating against AppSec architecture standards, SDLC integration patterns and API security controls.
- Review data security tooling including DLP and data classification against data security architecture standards.
- Review cloud security tooling and landing-zone configurations against the cloud security standards — CSPM policy baselines, CIEM entitlement boundaries, key management and network isolation across the Azure and GCP estates — and record where a deviation is an accepted exception rather than a gap.
- Keep your review records current in the assurance register, to the evidence standard audit will test.
- Run pre-production and business-as-usual reviews across Application Security, Data Security and Cloud Security, escalating cross-domain and precedent-setting designs to senior review.
Requirements
- Bachelor's degree in a relevant discipline, or equivalent professional experience