Associate Director - Design Assurance & Product Management - Independent Design Assurance

GSK remains committed to achieving bold commercial ambitions for the future. By 2031, we aim to deliver £40 billion in annual sales, leveraging our existing strong performance momentum to significantly increase our positive impact on the health of billions of patients globally. Our Ahead Together strategy is centred on early intervention to prevent and alter the course of disease, thereby protecting people and supporting healthcare systems. Our diverse portfolio consists of vaccines, specialty medicines, and general medicines. Through continuous innovation and a dedicated focus on scientific and technical excellence, we strive to develop and launch new, groundbreaking treatments that address critical health challenges. Domain focus: Independent Design Assurance across all Cyber Architecture and Solutions security domains, including Cryptography and AI Security. Job Purpose: Lead the Design Assurance practice, an eight-role team, as the most senior independent reviewer in Cyber Architecture and Solutions. You own the assurance methodology, review standards and assurance register, and manage reviewer capacity against demand. Accountable for pre-production architecture review, technical consultation and BAU design assurance. About the team: Design Assurance and Product Management makes sure security is designed in before anything is built, and that GSK's security capabilities are run as products rather than projects. Design Assurance independently verifies that solutions meet the architecture standards set elsewhere in Cyber Architecture and Solutions; it writes none of those standards, and that separation is what makes the review worth anything. Product Management owns the security portfolio, vendor governance and investment analytics, and is how GSK manages its managed service vendor as a whole. Platform support engineering moves into this function, with a small internal team retaining oversight while the vendor operates more than 30 platforms and the data fabric under an OTO model. Seventeen roles. What makes this role different. You lead an eight-person practice that issues binding go/no-go determinations on tools before they reach production — and you assure against architecture standards written elsewhere in Cyber Architecture and Solutions, which you do not own and must not rewrite. That separation is what makes the review worth anything, and it will be tested by programmes with committed go-live dates. Coverage spans every Cyber Architecture and Solutions domain including Cryptography and AI Security, so you need enough architecture literacy to arbitrate a finding in a domain you have never personally built in. The practice is subject to internal audit and regulatory inspection, and the assurance register and finding classification are yours to defend. Key responsibilities: This role will provide you the opportunity to lead key activities to progress your career. These responsibilities include some of the following: