Senior Principal - Design Assurance & Product Management - Portfolio-wide Analytics

14260 GSK India Global Services Private Limited; Bengaluru; On-site; INR 3,500,000 - 5,500,000; Full time

Job summary

GlaxoSmithKline plc is seeking a senior Portfolio Analytics lead in Bengaluru to own portfolio intelligence across Cyber Architecture and Solutions. You will build investment analytics, produce leadership-facing reports, and model scenarios to guide budget decisions.

You will apply AI/ML to analytics, ensure data integrity, and drive consolidations across the vendor and renewal cycle, in a regulated, global biopharma context.

Qualifications

• 15+ years in cyber security or technology portfolio analytics in a regulated environment.
• Building a security portfolio intelligence capability at enterprise scale.
• Applying AI and machine learning to portfolio analytics.

Responsibilities

• Own portfolio intelligence across the Cyber Architecture and Solutions product and project estate.
• Build and maintain the investment analytics that prioritisation decisions are made from.
• Produce portfolio reporting the leadership team steers by, and make the numbers defensible under challenge.
• Analyse vendor spend, performance and value across the managed service, including the OTO transition.
• Model investment scenarios and quantify trade-offs between competing priorities.
• Track benefit realisation against the cases that funded the work, including where benefits did not materialise.
• Own the data and definitions behind the reporting so figures reconcile across every forum.
• Identify trends and outliers and bring them to leadership attention unprompted.
• Build the costed option set for the annual plan, sequencing investment and decommission against the renewal calendar so consolidation savings are realised in the year they are claimed.
• Set the analytical standard for the function — data lineage, definition control and reproducibility — so any figure in a leadership pack can be traced to source and re-derived by someone else.
• Lead your team in using approved AI tools to improve productivity and ways of working, role-modelling responsible use and follow GSK's Responsible AI, privacy and security requirements.
• Apply data integrity and GxP record-keeping expectations to the figures this role publishes, so portfolio and benefit reporting stands up to audit.

Skills

Power BI

SQL

Python

MITRE ATT&CK

NIST CSF

Education

Bachelor's degree

Tools

ServiceNow

CMDB

Job description

GSK remains committed to achieving bold commercial ambitions for the future. By 2031, we aim to deliver £40 billion in annual sales, leveraging our existing strong performance momentum to significantly increase our positive impact on the health of billions of patients globally. Our Ahead Together strategy is centred on early intervention to prevent and alter the course of disease, thereby protecting people and supporting healthcare systems. Our diverse portfolio consists of vaccines, specialty medicines, and general medicines. Through continuous innovation and a dedicated focus on scientific and technical excellence, we strive to develop and launch new, groundbreaking treatments that address critical health challenges. Domain focus: Portfolio-wide analytics supporting all domain product owners.

Job Purpose:

Own portfolio intelligence and investment analytics for Cyber Architecture and Solutions. You turn portfolio, vendor and delivery data into the evidence prioritisation and investment decisions are made from, and you are the analytical backbone of the function.

About the team:

Design Assurance and Product Management makes sure security is designed in before anything is built, and that GSK's security capabilities are run as products rather than projects. Design Assurance independently verifies that solutions meet the architecture standards set elsewhere in Cyber Architecture and Solutions; it writes none of those standards, and that separation is what makes the review worth anything. Product Management owns the security portfolio, vendor governance and investment analytics, and is how GSK manages its managed service vendor as a whole. Platform support engineering moves into this function, with a small internal team retaining oversight while the vendor operates more than 30 platforms and the data fabric under an OTO model. Seventeen roles. What makes this role different. A genuinely analytical role, not a reporting role, and the distinction matters. Producing the pack is the easy part; the value is spotting the trend nobody asked about and bringing it to leadership unprompted. You do not need to have built security controls, but you do need to read a MITRE ATT&CK coverage map and judge for yourself whether two tools genuinely overlap or only appear to in the licence schedule. Your numbers will be used in investment decisions and challenged by people who do not want the answer, so they have to reconcile and you have to defend them.

Key responsibilities:

This role will provide you the opportunity to lead key activities to progress your career. These responsibilities include some of the following: Own portfolio intelligence across the Cyber Architecture and Solutions product and project estate. Build and maintain the investment analytics that prioritisation decisions are made from. Produce portfolio reporting the leadership team steers by, and make the numbers defensible under challenge. Analyse vendor spend, performance and value across the managed service, including the OTO transition. Model investment scenarios and quantify trade-offs between competing priorities. Track benefit realisation against the cases that funded the work, including where benefits did not materialise. Own the data and definitions behind the reporting so figures reconcile across every forum. Identify trends and outliers and bring them to leadership attention unprompted. Build the costed option set for the annual plan, sequencing investment and decommission against the renewal calendar so consolidation savings are realised in the year they are claimed. Set the analytical standard for the function — data lineage, definition control and reproducibility — so any figure in a leadership pack can be traced to source and re-derived by someone else. Lead your team in using approved AI tools to improve productivity and ways of working, role-modelling responsible use and follow GSK's Responsible AI, privacy and security requirements. Apply data integrity and GxP record-keeping expectations to the figures this role publishes, so portfolio and benefit reporting stands up to audit.

Basic Qualifications:

15+ years in cyber security or technology portfolio analytics in a regulated environment — domain focus: portfolio-wide analytics supporting all domain product owners Building a security portfolio intelligence capability at enterprise scale — threat-to-tool coverage matrix showing weak, duplicated or missing coverage, investment gaps and decommission candidates Automated portfolio monitoring — integrating tool inventory, licence and consumption, contract and renewal, cost and risk data into continuously refreshed dashboards, reconciling incomplete CMDB data Evidence-based decommission and consolidation business cases with quantified savings or risk reduction, analysed on the same domain structure as Security Solution Engineering Applying AI and machine learning to portfolio analytics — anomaly detection on licence and cost data, AI-assisted coverage mapping and assessment of AI-enabled security tools.

Preferred Qualifications:

Power BI or equivalent, SQL and Python for portfolio analytics, automation and data engineering Security tool landscape knowledge across all security product domains, enough to judge whether two tools genuinely overlap MITRE ATT&CK and NIST CSF applied to coverage mapping rather than cited in isolation Total cost of ownership, licence utilisation and shelf-ware analysis, including unused entitlement ahead of renewal Investment modelling and analytics support for domain product managers' portfolio decisions.

Qualifications:

Bachelor's degree in a relevant discipline, or equivalent professional experience. Typical tools and technologies: Power BI or equivalent, SQL and Python for analytics and automation, data modelling across tool inventory, licence entitlement and consumption, contract and renewal dates and cost, threat-to-tool coverage mapping using MITRE ATT&CK and NIST CSF, total cost of ownership and shelf-ware analysis, ServiceNow and CMDB data extraction, automated portfolio monitoring.

#AGTech Skills

AI for Cybersecurity, Application Security, Cloud Security, Computer Programming, Data Security, DNS Server, Domain Name System (DNS), Identity Access Management (IAM), Information Systems, Infrastructure Security, ML Security, Network Theory, Operating Systems Security, Scripting, Security Engineering, Security Technologies, Security Testing, Software-Defined Networking Wide Area Network (SD-WAN), Vulnerability Management, Zero Trust, Zero Trust Architecture

Why GSK?

Uniting science, technology and talent to get ahead of disease together. GSK is a global biopharma company with a purpose to unite science, technology and talent to get ahead of disease together. We aim to positively impact the health of 2.5 billion people by the end of the decade, as a successful, growing company where people can thrive. We get ahead of disease by preventing and treating it with innovation in specialty medicines and vaccines. We focus on four therapeutic areas: respiratory, immunology and inflammation; oncology; HIV; and infectious diseases – to impact health at scale. People and patients around the world count on the medicines and vaccines we make, so we’re committed to creating an environment where our people can thrive and focus on what matters most. Our culture of being ambitious for patients, accountable for impact and doing the right thing is the foundation for how, together, we deliver for patients, shareholders and our people.

Inclusion at GSK:

As an employer committed to Inclusion, we encourage you to reach out if you need any adjustments during the recruitment process. Please contact our Recruitment Team at [e-mail] to discuss your needs.

We are a global biopharma company with a special purpose – to unite science, technology and talent to get ahead of disease together – so we can positively impact the health of billions of people and deliver stronger, more sustainable shareholder returns – as an organisation where people can thrive. Getting ahead means preventing disease as well as treating it, and we aim to impact the health of 2.5 billion people around the world in the next 10 years. Our success absolutely depends on our people. While getting ahead of disease together is about our ambition for patients and shareholders, it’s also about making GSK a place where people can thrive. We want GSK to be a place where people feel inspired, encouraged and challenged to be the best they can be. A place where they can be themselves – feeling welcome, valued and included. Where they can keep growing and look after their wellbeing. So, if you share our ambition, join us at this exciting moment in our journey to get Ahead Together. Find out more on our career site.