Director, AI ML and Cloud Security

1925 GlaxoSmithKline LLC; United States; Remote; USD 169,000 - 281,000; Full time

Benefits offered by this job

Health care benefits

Retirement benefits

Paid holidays

Vacation time

Paid caregiver/parental and medical/LO

Job summary

GlaxoSmithKline plc seeks a senior AI architecture leader for Cyber Architecture and Solutions in the US. Owns the agentic framework and data fabric design, guiding three architects and ensuring architecture accountability across design, build and vendor operation.

You will drive standards, governance and AI security integration, collaborating with security, R&D and business units to enable scalable, compliant AI solutions.

Qualifications

• 12+ years of experience in cybersecurity or AI architecture, including leading teams across geographies.
• Experience designing agentic frameworks, multi-agent systems and Retrieval-Augmented Generation (RAG) architectures.
• Experience defining data fabric architectures with data classification, controls and evolving capabilities.
• Experience creating AI solution blueprints for security use cases and choosing model/architecture across hosted/self-hosted LLMs.

Responsibilities

• Act as design authority for every AI solution Cyber Architecture and Solutions builds.
• Own the agentic framework architecture and data fabric design, including governance and trade-offs.
• Lead architects covering solution architecture, standards and governance; chair the design authority board.

Skills

AI architecture

Agentic frameworks

Data fabric architecture

RAG architectures

Security architecture

Leadership across geographies

Kubernetes

Python

LangChain

LlamaIndex

Vector databases

Tools

Kubernetes

Python

LangChain

LlamaIndex

Vector databases

Job description

Business Introduction GSK remains committed to achieving bold commercial ambitions for the future. By 2031, we aim to deliver £40 billion in annual sales, leveraging our existing strong performance momentum to significantly increase our positive impact on the health of billions of patients globally. Our Ahead Together strategy is centred on early intervention to prevent and alter the course of disease, thereby protecting people and supporting healthcare systems. Our diverse portfolio consists of vaccines, specialty medicines, and general medicines. Through continuous innovation and a dedicated focus on scientific and technical excellence, we strive to develop and launch new, groundbreaking treatments that address critical health challenges. Domain focus: AI Architecture (agentic framework, data fabric architecture and AI solution blueprints); design authority for enterprise AI/ML.

Position Summary Own all AI architecture for Cyber Architecture and Solutions — the designs that AI Engineering builds and a managed service vendor operates. You are the design authority for the agentic framework and the data fabric: nothing is built without a specification from your team. You lead three architects and carry architecture accountability across design, build and vendor operation.

About the team. AI ML and Cloud Security is the function through which GSK is transforming security itself. The team designs and builds the agentic framework, a multi-agent platform moving security services across the Chief Security Office from rule-based to AI-driven operation. It owns AI architecture and AI engineering end to end: the agent layer, LLM orchestration, the AI and ML platform, and the data fabric pipeline that Cyber Architecture and Solutions designs, builds and tests before a managed service vendor operates it. The team also governs AI tool security posture, advises on cloud security across the Azure and GCP estate, and is the front door between GSK's business units and R&D and the technical AI function. AI security standards set here are binding on every AI initiative in GSK.

Seventeen roles across the UK, India and the US.

What makes this role different. This is a design authority role, not an AI governance role. You will personally own the agentic framework architecture — agent orchestration, tool invocation, identity binding, least-privilege scoping — and the data fabric design that determines what data flows where, at what classification, under what controls. Expect to whiteboard an agentic or RAG architecture you designed and defend the trade-offs. If your AI background is policy frameworks and vendor assessment rather than designs that were built, this will not suit you.

Responsibilities This role will provide YOU the opportunity to lead key activities to progress YOUR career. These responsibilities include some of the following: Act as design authority for every AI solution Cyber Architecture and Solutions builds; nothing enters engineering without a specification from this team. Own the agentic framework architecture: agent orchestration, tool invocation control, identity binding, least-privilege scoping, human-in-the-loop gates and trust boundaries. Own the data fabric architecture — what data flows where, at what classification, under what controls, and how the fabric evolves as the vendor introduces agentic capability. Own the AI reference design and pattern library that Engineering and the vendor build against. Lead three architects covering solution architecture, standards and governance. Chair the design authority board where every Cyber Architecture and Solutions AI build is approved or sent back before engineering capacity is allocated. Assess new AI tool proposals for architectural fit and reject what does not conform. Rule on feasibility for the highest-risk R&D and business AI proposals that AI Business Facing escalates to you. Assure vendor handover packages and retain architecture accountability once the vendor operates the solution. Set the architecture decision record template and arbitrate the decisions it captures, so design rationale stays traceable for audit and regulatory inspection.

Why You? Basic Qualification We are seeking professionals with the following required skills and qualifications to help us achieve our goals: 12+ years of experience in cybersecurity or AI architecture, including experience leading technical teams across geographies, with expertise in AI architecture, including agentic frameworks, data fabric architecture, AI solution blueprints, and design authority for enterprise AI/ML solutions. Experience designing agentic frameworks, multi-agent systems, and Retrieval-Augmented Generation (RAG) architectures, including agent design patterns, trust models, orchestration, tool-calling boundaries, identity binding, least-privilege tool scoping, human-in-the-loop approvals, containment, kill switches, and rollback mechanisms. Experience designing data fabric architectures, including defining how data flows across systems, data classification requirements, applicable controls, and how these architectures evolve as agentic capabilities are introduced. Experience developing AI solution blueprints for security use cases, including GenAI alert triage, automated investigations, threat summarization, and AI-driven workflows, with experience establishing model and platform selection criteria across hosted and self-hosted LLMs, embeddings, vector stores, and orchestration platforms based on security, cost, latency, and data residency requirements. Experience incorporating AI security standards and threat modeling into solution design, including frameworks and standards such as the EU AI Act, NIST AI Risk Management Framework (AI RMF), and ISO/IEC 42001, and translating these requirements into technical specifications for engineering teams.

Preferred Qualification If you have the following characteristics, it would be a plus: Working understanding of LangChain or LlamaIndex, vector databases, production Python and Kubernetes AI use-case feasibility assessment and risk-based prioritisation before engineering build Architecture quality review and standards governance Regulated industry experience, including GxP and data integrity requirements applied to AI North American AI architecture coverage and R&D pipeline engagement (US-based role) #GSK-LI #AGTech Skills AI for Cybersecurity, Application Security, Cloud Security, Computer Programming, Data Security, Identity Access Management (IAM), Information Systems, Infrastructure Security, ML Security, Operating Systems Security, Scripting, Security Engineering, Security Technologies, Security Testing, Vulnerability Management

The US annual base salary for new hires in this position ranges from $168,750 to $281,250. The US salary ranges take into account a number of factors including work location within the US market, the candidate’s skills, experience, education level and the market rate for the role.

Available benefits include health care and other insurance benefits (for employee and family), retirement benefits, paid holidays, vacation, and paid caregiver/parental and medical leave.

If salary ranges are not displayed in the job posting for a specific country, the relevant compensation will be discussed during the recruitment process. Please visit GSK US Benefits Summary to learn more about the comprehensive benefits program GSK offers US employees.

Why GSK? Uniting science, technology and talent to get ahead of disease together. GSK is a global biopharma company with a purpose to unite science, technology and talent to get ahead of disease together. We aim to positively impact the health of 2.5 billion people by the end of the decade, as a successful, growing company where people can thrive. We get ahead of disease by preventing and treating it with innovation in specialty medicines and vaccines. We focus on four therapeutic areas: respiratory, immunology and inflammation; oncology; HIV; and infectious diseases – to impact health at scale. People and patients around the world count on the medicines and vaccines we make, so we’re committed to creating an environment where our people can thrive and focus on what matters most. Our culture of being ambitious for patients, accountable for impact and doing the right thing is the foundation for how, together, we deliver for patients, shareholders and our people.

We are a global biopharma company with a special purpose – to unite science, technology and talent to get ahead of disease together – so we can positively impact the health of billions of people and deliver stronger, more sustainable shareholder returns – as an organisation where people can thrive.

Getting ahead means preventing disease as well as treating it, and we aim to impact the health of 2.5 billion people around the world in the next 10 years. Our success absolutely depends on our people.

While getting ahead of disease together is about our ambition for patients and shareholders, it’s also about making GSK a place where people can thrive. We want GSK to be a place where people feel inspired, encouraged and challenged to be the best they can be. A place where they can be themselves – feeling welcome, valued and included. Where they can keep growing and look after their wellbeing. So, if you share our ambition, join us at this exciting moment in our journey to get Ahead Together.

Find out more on our career site.