Senior Manager - Design Assurance & Product Management

14260 GSK India Global Services Private Limited; Bengaluru; On-site; INR 2,000,000 - 3,400,000; Full time

Job summary

GSK is seeking a senior delivery manager within Bengaluru to oversee the design assurance practice, coordinating Principals and analysts. You will schedule reviews, allocate reviewers, and drive findings to closure while tracking SLA performance and governance packs.

You will also champion workflow automation using ServiceNow and AI tools, ensuring evidence standards and collaboration with security architecture teams. The role focuses on throughput, accuracy, and product-like governance.

Qualifications

• 10+ years in cyber security or technology assurance.
• Experience managing delivery across Principals and analysts.
• Ability to manage AI and agentic tool reviews and enforce evidence standards.

Responsibilities

• Manage the demand pipeline across two Principals and domain analysts.
• Monitor throughput, turnaround and SLA metrics and raise capacity issues.
• Drive findings to closure across all domains and maintain governance reporting.

Skills

Delivery management

Review scheduling

Reviewer allocation

Throughput metrics

Audit evidence packs

AI tools usage

ServiceNow workflows

Power BI

Education

Bachelor's degree

Tools

ServiceNow

Power BI

Job description

GSK remains committed to achieving bold commercial ambitions for the future. By 2031, we aim to deliver £40 billion in annual sales, leveraging our existing strong performance momentum to significantly increase our positive impact on the health of billions of patients globally.

Our Ahead Together strategy is centred on early intervention to prevent and alter the course of disease, thereby protecting people and supporting healthcare systems. Our diverse portfolio consists of vaccines, specialty medicines, and general medicines. Through continuous innovation and a dedicated focus on scientific and technical excellence, we strive to develop and launch new, groundbreaking treatments that address critical health challenges.

Domain focus: Design Assurance practice delivery across all Cyber Architecture and Solutions security domains.

Job Purpose: The delivery management layer in the Design Assurance practice, between the Principals and the analysts.

You own review scheduling and reviewer allocation against demand, track findings to closure across the practice, and manage the assurance throughput and turnaround metrics the function is judged on. You carry a review caseload alongside the management load.

About the team: Design Assurance and Product Management makes sure security is designed in before anything is built, and that GSK's security capabilities are run as products rather than projects.

Design Assurance independently verifies that solutions meet the architecture standards set elsewhere in Cyber Architecture and Solutions; it writes none of those standards, and that separation is what makes the review worth anything.

Product Management owns the security portfolio, vendor governance and investment analytics, and is how GSK manages its managed service vendor as a whole.

Platform support engineering moves into this function, with a small internal team retaining oversight while the vendor operates more than 30 platforms and the data fabric under an OTO model. Seventeen roles.

What makes this role different. The delivery management layer between the Principals and the analysts in a practice judged on throughput and turnaround, not just rigour.

You own review scheduling and reviewer allocation against incoming demand, drive findings to closure across every domain, and run the governance reporting and audit evidence packs.

Workflow automation in ServiceNow is how the practice scales, and improving it is part of the role.

You carry a review caseload alongside the management load, so this is not a pure coordination job.

Key responsibilities

• Manage the demand pipeline across two Principals and the domain analysts, and decide what gets expedited — including telling a programme director that their review will not be.
• Manage assurance throughput, turnaround and SLA metrics the function is judged on, and elevate capacity pressure before turnaround slips quietly.
• Drive findings and time-bound conditions to closure across all domains, chasing the ones that stall and escalating aged items by name.
• Develop the analyst team's domain depth and progression, in a practice where most reviewers arrive strong in one domain and need two.
• Own the quality of what the practice produces — review rigour, finding clarity and closure discipline — and correct it at the individual level when it drops.
• Carry a review caseload alongside the management load, so technical credibility with the Principals is maintained.
• Manage the analyst team's day-to-day workload, quality and development across their domain specialisms.
• Carry roughly a third of a reviewer caseload yourself on Tier 2 designs, so allocation decisions are informed by current technical judgement rather than administration.
• Verify against standards the practice does not write, and protect that separation in how work is allocated.
• Spot capacity pressure in the pipeline two sprints out and elevate it, rather than letting turnaround slip quietly and explaining it afterwards.
• Use approved AI tools in your day-to-day work to improve your own productivity and your team's ways of working, sharing what works and applying sound judgement, including validating outputs and following GSK's Responsible AI, privacy and security requirements.

Basic Qualifications

10+ years in cyber security or technology assurance, including team management — domain focus: Design Assurance practice delivery across all Cyber Architecture and Solutions security domains Managing delivery across Principals and analysts — review scheduling and reviewer allocation against demand, using workflow automation Tracking findings to closure with throughput and turnaround metrics, and running practice governance reporting and audit evidence packs Carrying a review caseload alongside people management, coordinating with architecture, engineering and vendor delivery teams Managing AI and agentic tool reviews within the practice, and using AI to improve review throughput and evidence qualityManaging AI and agentic tool reviews within the practice, and setting the evidence standard those reviews must meet.

Preferred Qualifications

Managing and developing a team of senior reviewers and analysts ServiceNow or equivalent GRC and workflow tooling, including automation and dashboards Enough architecture depth to personally carry a Tier 2 review of a SIEM integration or a cloud landing-zone design, so reviewer allocation is informed rather than administrative. Regulated industry experience, including GxP and audit evidence standards Protecting senior review capacity by absorbing day-to-day allocation and demand management into the delivery layer.

Qualifications

Bachelor's degree in a relevant discipline, or equivalent professional experience.

Typical tools and technologies: Review scheduling and reviewer allocation, workflow automation in ServiceNow, SLA, throughput and turnaround metrics, findings tracking to closure, governance reporting and audit evidence packs, Power BI.

#AGTech Skills

• AI for Cybersecurity
• Application Security
• Cloud Security
• Computer Programming
• Cybersecurity
• Cyber Security Architecture
• Data Security
• Design Assurance
• Identity Access Management (IAM)
• Information Systems
• Infrastructure Security
• ML Security
• Operating Systems Security
• Scripting
• Security Engineering
• Security Technologies
• Security Testing
• Technology Assessment
• Technology Compliance
• Vulnerability Management

Why GSK?

Uniting science, technology and talent to get ahead of disease together.

GSK is a global biopharma company with a purpose to unite science, technology and talent to get ahead of disease together. We aim to positively impact the health of 2.5 billion people by the end of the decade, as a successful, growing company where people can thrive.

We get ahead of disease by preventing and treating it with innovation in specialty medicines and vaccines.

We focus on four therapeutic areas: respiratory, immunology and inflammation, oncology, HIV, and infectious diseases – to impact health at scale.

People and patients around the world count on the medicines and vaccines we make, so we’re committed to creating an environment where our people can thrive and focus on what matters most.

Our culture of being ambitious for patients, accountable for impact and doing the right thing is the foundation for how, together, we deliver for patients, shareholders and our people.

Inclusion at GSK

As an employer committed to Inclusion, we encourage you to reach out if you need any adjustments during the recruitment process. Please contact our Recruitment Team at [e-mail] to discuss your needs.

We want GSK to be a place where people feel inspired, encouraged and challenged to be the best they can be. A place where they can be themselves – feeling welcome, valued and included. Where they can keep growing and look after their wellbeing. So, if you share our ambition, join us at this exciting moment in our journey to get Ahead Together.