Chief AI Security & Cloud Leader

GSK; Greater London; Hybrid; GBP 180,000 - 260,000; Full time

Job summary

GSK seeks a Senior Director for AI ML & Cloud Security to lead the function that designs, engineers and governs AI/ML security capabilities across the group. You will own the agentic framework, AI security standards and cloud governance for Azure and GCP, spanning the UK, India and the US.

The role leads a 17-role function across five sub-functions in a scarce skills market, with responsibility for strategy, architecture, ecosystems, and risk management in a regulated, GxP environment.

Qualifications

• Significant leadership expereince in cyber security or AI engineering, including senior leadership in a regulated environment — domain focus: AI ML & Cloud Security (AI Architecture, AI Engineering, AI Platform & Cloud Security, AI Business Facing); setting the AI security strategy and roadmap with measurable outcomes
• Designing and delivering an agentic AI framework into production at enterprise scale — multi-agent orchestration, tool and action scoping, guardrails, containment and rollback, evaluation and regression testing of non-deterministic behaviour, observability, audit traceability and full agent lifecycle
• Leading a combined AI architecture and engineering organisation — design authority held separate from build — and governing build-to-operate transition of AI tools and the data fabric to a managed service vendor
• Enterprise AI/ML security — standards library, AI threat modelling, model and agent risk tiering, adversarial testing and shadow AI discovery — covering prompt injection, data poisoning, model extraction, excessive agency and AI supply-chain risk (MITRE ATLAS, OWASP LLM Top 10)
• Enterprise data fabric from classification architecture to built, tested pipeline, plus cloud security posture governance across Azure and GCP
• Track record leading leaders of teams across multiple geographies and time zones.
• Executive presence to operate as a technical peer to CISO, CTO and Enterprise AI leadership, and to say no credibly to funded initiatives.

Responsibilities

• Set the three-year plan that moves CSO security services from rule-based to agent-operated, and defend the investment case for it to the CISO and GSK Tech leadership.
• Own the architecture, engineering and secure delivery of the agentic framework transforming security services across the Chief Security Office — agent authorisation models, tool-invocation control, human-in-the-loop gates, trust boundaries and runtime monitoring, designed in from inception.
• Own the design-to-build-to-handover pipeline: specifications engineered faithfully, the data fabric built and tested to specification, and vendor handover packages good enough for a managed service to operate safely from day one.
• Own the AI security standards, reference architectures and threat models binding across CAS and every GSK business AI initiative; no AI capability is architected, built or released without meeting them.
• Lead a 17-role function across five sub-functions and three countries, including leaders of teams, and own its capability and succession plan in a genuinely scarce skills market.
• Own AI platform security governance: agent risk-tiering, LLM and API exposure standards, AI-specific incident response, and the shadow AI discovery programme across the business.
• Own cloud security governance across Azure and GCP on an advisory and standards-setting basis, exercising authority through standards and escalation while platform teams retain remediation.
• Own adversarial AI defence: AI red teaming, prompt and model attack testing, and the mandatory remediation regime that follows, informed by MITRE ATLAS and current research.
• Translate the EU AI Act, NIST AI RMF and ISO/IEC 42001 into architectural requirements ahead of mandated deadlines rather than in response to audit.
• Represent the function to the CISO, GSK Tech leadership, the Enterprise AI programme, auditors and regulators, and own board-level escalation of material AI security risk.
• Own the commercial relationship with the managed service vendor operating the agentic framework and data fabric, including the service definition, the handover gates and the exit plan.

Skills

Leadership experience

Cyber security

AI engineering

AI governance

Enterprise security

Cloud security

Security strategy

Executive presence

Cross-geography leadership

Regulated environment

NIST/ISO alignment

GxP awareness

Tools

LangChain

LangGraph

vector databases

Kubernetes

Python

LLM orchestration

Job description

GSK seeks a Senior Director for AI ML & Cloud Security to lead the function that designs, engineers and governs AI/ML security capabilities across the group. You will own the agentic framework, AI security standards and cloud governance for Azure and GCP, spanning the UK, India and the US.

The role leads a 17-role function across five sub-functions in a scarce skills market, with responsibility for strategy, architecture, ecosystems, and risk management in a regulated, GxP environment.