Lead Analyst - Design Assurance & Product Management - Operations

14260 GSK India Global Services Private Limited; Bengaluru; On-site; INR 4,500,000 - 6,500,000; Full time

Job summary

GlaxoSmithKline plc in Bengaluru, India seeks a senior Design Assurance Operations lead to run intake, governance and audit-ready packs. You will own the DA workflow in ServiceNow, ensure architecture specs exist, and manage calendars and templates.

Expertise in DA tooling, governance, and AI-assisted processes is essential for rapid, compliant reviews. The role emphasizes cross-domain coordination, regulatory reporting, and delivering audit-ready evidence while improving intake efficiency and

Qualifications

• Minimum 10 years in cyber security or programme coordination.
• Experience running DA intake, triage and reporting.
• Ability to own DA tooling, templates and governance packs.

Responsibilities

• Run DA intake in ServiceNow and route requests to the right reviewer.
• Ensure architecture specs exist before reviews start.
• Maintain review calendar and publish turnaround commitments.
• Version-control DA templates and tooling; manage updates.
• Produce Power BI reports on throughput and SLA performance.
• Prepare governance packs with audit trails for inspections.
• Track findings and drive closure of issues.
• Own the assurance register for audit and regulatory needs.
• Assemble audit evidence requests and regulatory trails.
• Improve intake, coordination, and automation; use approved AI tools responsibly.

Skills

Design Assurance

Governance

ServiceNow

Power BI

AI tools

Regulatory knowledge

Education

Bachelor's degree

Tools

ServiceNow

SharePoint

Power BI

Job description

GSK remains committed to achieving bold commercial ambitions for the future. By 2031, we aim to deliver £40 billion in annual sales, leveraging our existing strong performance momentum to significantly increase our positive impact on the health of billions of patients globally. Our Ahead Together strategy is centred on early intervention to prevent and alter the course of disease, thereby protecting people and supporting healthcare systems. Our diverse portfolio consists of vaccines, specialty medicines, and general medicines. Through continuous innovation and a dedicated focus on scientific and technical excellence, we strive to develop and launch new, groundbreaking treatments that address critical health challenges.

Domain focus

Design Assurance Operations (intake, scheduling, tooling and committee).

Job Purpose

Run Design Assurance programme coordination and governance: the operational backbone that keeps the practice running. You manage all incoming review requests, check scope, confirm the right architecture specification is available, and allocate to the correct domain analyst. You maintain the review calendar and the governance reporting.

About the team

Design Assurance and Product Management makes sure security is designed in before anything is built, and that GSK's security capabilities are run as products rather than projects. Design Assurance independently verifies that solutions meet the architecture standards set elsewhere in Cyber Architecture and Solutions; it writes none of those standards, and that separation is what makes the review worth anything. Product Management owns the security portfolio, vendor governance and investment analytics, and is how GSK manages its managed service vendor as a whole. Platform support engineering moves into this function, with a small internal team retaining oversight while the vendor operates more than 30 platforms and the data fabric under an OTO model.

Seventeen roles. What makes this role different. The operational backbone of the Design Assurance practice rather than a reviewer role. You own the ServiceNow intake workflow, the review calendar and the DA tooling and templates, and you will be the person who notices that a review request arrived without the architecture specification attached and stops it before it wastes a reviewer's week. Expect to produce audit evidence packs and committee material under GxP record-keeping standards, where a missing date or an unsigned approval is itself the finding.

Key responsibilities

• Run Design Assurance intake in ServiceNow: log every review request, scope-check it, and route it to the right domain reviewer across Network and Zero Trust, Platform Security and MDR, Application Security, Data Security and Cloud, OT Security and Vulnerability and Configuration Management, and Cryptography, PQC and AI Security.
• Confirm the architecture specification exists and is current before a review starts, and reject requests that arrive without one rather than letting a reviewer discover it mid-week.
• Maintain the review calendar and reviewer allocation against capacity, and publish turnaround commitments to requesting programmes.
• Administer and version-control the Design Assurance template and tooling set, publishing approved updates and withdrawing superseded versions so no reviewer works from a stale template.
• Produce practice reporting in Power BI: throughput, first-time-pass rate, turnaround against SLA, coverage by domain and bypass rate.
• Prepare governance forum packs and the supporting evidence trail, to GxP record-keeping standards where a missing approval or date is itself the finding.
• Track findings and time-bound conditions to closure across the practice, chase the ones that stall, and elevate aged items by name.
• Own the assurance register as the single record of what has been reviewed, by whom and with what outcome, so coverage can be evidenced on demand for internal audit and regulatory inspection without reconstruction.
• Assemble audit and regulatory evidence requests, including the decision trail showing a review actually operated rather than merely existed.
• Improve the intake and coordination process and automate the manual steps, rather than only operating them.
• Use approved AI tools in your day-to-day work to improve your own productivity and your team's ways of working, sharing what works and applying sound judgement, including validating outputs and following GSK's Responsible AI, privacy and security requirements.

Basic Qualifications

• 10+ years in cyber security, technology governance or programme coordination
• domain focus: Design Assurance Operations (intake, scheduling, tooling and committee) Running DA intake and triage
• scope check, specification check and allocation to the right domain analyst
• and managing the review calendar so no request is lost or delayed
• Owning DA tooling and templates
• GRC system, SharePoint and review packs
• with automated intake, reminders and reporting
• Administering the Design Assurance Committee
• agenda, minutes and actions
• and maintaining the DA knowledge base and requestor onboarding
• Using AI and automation to streamline DA intake, triage and reporting, and routing AI tool reviews to the right specialistRunning DA intake, triage and reporting, including the automation that supports it, and routing AI tool reviews to the right specialist

Preferred Qualifications

• GRC tooling such as ServiceNow
• and SharePoint or equivalent repository management
• Power BI or equivalent for DA performance and governance reporting
• Workflow automation or low-code tooling for intake and reminders
• Exposure to security architecture and GxP-compliant documentation practice
• Operating a controlled records environment where retention, version history and approval trails survive an inspection without reconstruction.

Qualifications

Bachelor's degree in a relevant discipline, or equivalent professional experience.

Typical tools and technologies

• Intake and triage workflow in ServiceNow
• review calendar and reviewer allocation
• design assurance templates and tooling administration
• committee and governance pack preparation
• Power BI for throughput and SLA reporting
• GxP-compliant records management.

AGTech Skills

• AI for Cybersecurity
• Application Security
• Cloud Security
• Computer Programming
• Data Security
• Design Assurance
• Identity Access Management (IAM)
• Information Systems
• Infrastructure Security
• IT Governance
• Microsoft Power BI
• ML Security
• Operating Systems Security
• Product Management
• Scripting
• Security Engineering
• Security Technologies
• Security Testing
• Vulnerability Management
• Zero Trust

Why GSK?

Uniting science, technology and talent to get ahead of disease together. GSK is a global biopharma company with a purpose to unite science, technology and talent to get ahead of disease together. We aim to positively impact the health of 2.5 billion people by the end of the decade, as a successful, growing company where people can thrive. We get ahead of disease by preventing and treating it with innovation in specialty medicines and vaccines. We focus on four therapeutic areas: respiratory, immunology and inflammation; oncology; HIV; and infectious diseases - to impact health at scale. People and patients around the world count on the medicines and vaccines we make, so we’re committed to creating an environment where our people can thrive and focus on what matters most. Our culture of being ambitious for patients, accountable for impact and doing the right thing is the foundation for how, together, we deliver for patients, shareholders and our people.

Inclusion at GSK

As an employer committed to Inclusion, we encourage you to reach out if you need any adjustments during the recruitment process. Please contact our Recruitment Team at [e-mail] to discuss your needs.

We are a global biopharma company with a special purpose - to unite science, technology and talent to get ahead of disease together - so we can positively impact the health of billions of people and deliver stronger, more sustainable shareholder returns - as an organisation where people can thrive. Getting ahead means preventing disease as well as treating it and we aim to impact the health of 2.5 billion people around the world in the next 10 years. Our success absolutely depends on our people. While getting ahead of disease together is about our ambition for patients and shareholders, it’s also about making GSK a place where people can thrive. We want GSK to be a place where they feel inspired, encouraged and challenged to be the best they can be. A place where they can be themselves - feeling welcome, valued and included. Where they can keep growing and look after their wellbeing. So, if you share our ambition, join us at this exciting moment in our journey to get Ahead Together. Find out more on our career site.