Lead Analyst, Design Assurance & Product Management - Application Security
GSK (company site, opens in a new tab)10+ yrsBengaluruOn-siteDirect career pageEst. 28–45 LPA
Posted 3d ago
Reach people at GSK
People at this company you can reach
Log in to see who works here
Create a free account or log in to see the people at GSK you could write to:
- Recruiters & HR
- People in this function
- Work addresses
Your match
Against your primary resume
Log in to see your match score
Create a free account or log in to unlock your CV match score across:
- Role fit
- Experience
- Industry relevance
Protocol Intelligence
How competitive this role is
Competition
Background fit
Strictness
Log in to see why each signal reads the way it does.
Job description
Structured overview of role & requirements
About This Role
- Own and maintain the Design Assurance register tracking assurance coverage, findings, SLAs, and remediation evidence across Application Security, Data Security, and Cloud Security domains.
- Perform pre-production and business-as-usual reviews of security tooling (SAST, DAST, SCA, DLP, CSPM, CIEM) and configurations against established architecture standards, escalating critical findings and preparing governance review packs.
- Support audit and regulatory requests by providing validated evidence from the assurance register and promote consistent security controls across multi-cloud environments including Azure and GCP.
Minimum Requirements
- 10+ years of experience in cybersecurity with a focus on Design Assurance for Application Security, Data Security, and Cloud Security.
- Experience reviewing and validating security tooling such as SAST, DAST, SCA, DLP, data classification, CSPM, and CIEM against architecture standards.
- Bachelor's degree in a relevant discipline or equivalent professional experience.
- Work Experience Required: 10+ years in cyber security
Ideal Candidate Profile
- Experienced in independently verifying security solutions against architecture standards without owning the standards themselves, emphasizing accuracy and audit-readiness of assurance documentation.
- Comfortable managing cross-domain activities and balancing breadth across application, data, and cloud security rather than deep specialization in a single domain.
- Familiar with secure SDLC integration patterns, API security controls, multi-cloud security policies, and automation or scripting for security processes.