Lead Analyst - Digital Investigations, Analytics & Insider Threat

GSK; Bengaluru; On-site; INR 2,500,000 - 4,500,000; Full time

Job summary

GSK is seeking a Lead Analyst to drive Digital Investigations, Analytics & Insider Threat. This hands‑on role leads investigations, develops detection logic, and advances an agentic AI framework to automate prevention and response to insider risk.

You will work across HR, IT and security teams in a highly regulated pharma context. The ideal candidate combines deep investigative skills with analytics, data science and cybersecurity tooling, delivering rigorous analysis and scalable solutions at

Qualifications

• Degree in a relevant discipline or related experience.
• Demonstrated experience in digital investigations or insider threat.

Responsibilities

• Run insider threat investigations and detection operations as a senior hands‑on contributor.
• Conduct digital investigations into suspected policy violation, data theft and insider activity.
• Perform tactical analysis across multiple information streams to detect insider threat indicators.
• Perform statistical analysis of insider events to identify patterns, trends and control gaps.
• Build and tune detection logic across DLP and UEBA platforms, balancing coverage against false positive load.
• Engineer and maintain data pipelines for HR, access, endpoint, email and cloud telemetry.
• Carry out insider threat risk assessments across business units and scenarios.
• Participate in developing the team’s agentic AI framework for automation and validation.
• Deliver assigned work to agreed quality and timelines.
• Support colleagues with peer review and knowledge sharing.

Skills

AI for Cybersecurity

Case Management

Cloud Security

Cyber Threat Intelligence

Digital Investigation

Incident Management

Investigative Analysis

ML Security

Security Monitoring

Education

Bachelor's degree in Computer Science or related discipline

Tools

DLP

UEBA

EDR

SIEM

Forensic Imaging

Job description

GSK remains committed to achieving bold commercial ambitions for the future. By 2031, we aim to deliver £40 billion in annual sales, leveraging our existing strong performance momentum to significantly increase our positive impact on the health of billions of patients globally. Our Ahead Together strategy is centred on early intervention to prevent and alter the course of disease, thereby protecting people and supporting healthcare systems. Our diverse portfolio consists of vaccines, specialty medicines, and general medicines. Through continuous innovation and a dedicated focus on scientific and technical excellence, we strive to develop and launch new, groundbreaking treatments that address critical health challenges.

Job Purpose:

The Lead Analyst, Digital Investigations, Analytics & Insider Threat will deliver the team's work and act as a senior hands‑on contributor within Digital Investigations, Analytics & Insider Threat, with insider threat operations as the priority focus. This is a hands‑on analytical role that runs current insider threat operations and participates in developing the agentic AI framework that will optimise and automate the prevention, detection and response to insider threat events.

About the team:

The Digital Investigations, Analytics and Insider Threat team runs GSK's insider threat program end to end, detecting, investigating and responding to threats from those who already have authorised access, and protecting GSK intellectual property and confidential business information from insider risk. The team also covers digital forensics and investigative analytics in support of insider threat and related casework. Alongside running current operations, the team is building an agentic AI framework to optimise and automate the prevention, detection and response to insider threat events, and every role in the team contributes to its development.

Key responsibilities:

• Run insider threat investigations and detection operations as a senior hands‑on contributor.
• Conduct digital investigations into suspected policy violation, data theft and insider activity.
• Perform tactical analysis across multiple information streams to detect insider threat indicators.
• Perform statistical analysis of insider events to identify patterns, trends and control gaps.
• Build and tune detection logic across DLP and UEBA platforms, balancing coverage against false positive load.
• Engineer and maintain the data pipelines that bring HR, access, endpoint, email and cloud telemetry into the analytics layer.
• Carry out insider threat risk assessments across business units, functions and scenarios.
• Participate in developing the team's agentic AI framework: define insider threat use cases and playbooks suitable for automation, test and validate agentic workflows and AI‑generated outputs against real investigations, and feed analyst insight back into the models.
• Deliver assigned work to agreed quality and timelines.
• Support colleagues with peer review and knowledge sharing.

Basic Qualifications:

• Degree in a relevant discipline, or related experience.
• Demonstrated experience in digital investigations, insider threat or corporate investigations.
• Working knowledge of investigative analytics and case handling.
• Practical hands‑on experience in the relevant cyber security domain.
• Demonstrated ability to deliver work independently to a high standard.
• Strong attention to detail in analysis and documentation.

Preferred Qualifications:

• Hands‑on experience with Data Loss Prevention and User and Entity Behavior Analytics platforms.
• Experience with digital forensics tooling and evidence handling.
• Experience handling matters with HR and Legal involvement.
• Statistical analysis and data visualization skill.
• Relevant certification such as CERT Insider Threat Program Manager, GCITP, GCFA, GCFE, CISSP, CompTIA Security+.
• Experience in pharmaceutical, life sciences or another highly regulated industry.
• Experience applying automation, scripting or AI‑assisted tools to security analytics or investigations.
• Typical tools and technologies: DLP, UEBA, EDR, SIEM, forensic imaging and analysis tooling, case management platforms.

Skills:

• AI for Cybersecurity
• Case Management
• Cloud Security
• Cyber Threat Intelligence
• Digital Investigation
• DLP Projectors
• Forensic Data Analysis
• Incident Management
• Infrastructure Security
• Insider Threat Mitigation
• Intrusion Detection
• Intrusion Prevention
• Investigative Analysis
• ML Security
• Offensive Cyber Operations
• Security Monitoring
• Security Operations
• Security Planning
• Security Protocols
• Security Risk
• Security Technologies

Why GSK?

Uniting science, technology and talent to get ahead of disease together. GSK is a global biopharma company with a purpose to unite science, technology and talent to get ahead of disease together. We aim to positi