Snr Director, Security Architecture

We’re excited to be moving to our vibrant new home on New Oxford Street in central London from the end of June 2024. At GSK HQ, we’re building an energising space where we can connect, collaborate and get ahead of disease together. Designed especially for us, it’ll be one of the healthiest workplaces in the world, with best-in-class tech and bright, light spaces to help us thrive.

As Senior Director, Security Architecture, the candidate will have end-to-end responsibility for GSK’s security architecture reporting to the Deputy CISO, Cyber Security Strategy and Solutions.

To achieve this, the candidate will lead a global team of security architects responsible for evaluating and recommending security solutions in alignment to our cyber strategy including cloud, data, and technology blueprints.

The cyber security solutions architected by this team will ensure the security of the global network and therefore, this candidate must be a senior technology leader with proven experience architecting secure by design solutions. The candidate will interact, collaborate, and form alignment with other Cyber Security Office (CSO) teams as well as affiliated GSK tech professionals including the Enterprise Architecture Team.

This role will engage with senior contacts in tech and across the business for the identification of information security needs and will ensure that appropriate controls are designed into our platforms, new products, and capabilities. 

Responsibilities:

• Provide leadership, direction, and development of a team of multi-disciplined security architects, including varying levels of staff in a matrixed, virtual environment, sustaining team energy, wellbeing, and resilience

• End to end ownership of security architecture and secure by design principals

• Integrate a deep understanding of business changes on the horizon into security solutions which will require interaction with senior tech executives and stakeholders across the organization

• Contribute to research in emerging cyber solutions and strategies

• Evaluate and implement security controls to be used across our platforms and all layers of the application stack while maintaining alignment with GSK’s overall enterprise strategy and architecture

• Support the development of reference architectures and associated reusable work products and assessment assets including detailed designs that provide deployable building blocks.

• Responsibility for the identification of security design gaps in existing or new systems and recommend mitigations.

• Play a key role as part of the Enterprise Architecture Group who drive an integrated architectural plan across the company.

• Partner with security engineering and platform support engineering to set the course for secure development practices for existing and future security solutions.

Basic qualifications:

• The candidate must have extensive and proven experience in the architecture of secure solutions

• Knowledge of legal and/or regulatory matters in the context of enterprise security

• 10+ years in architecture security

• Understanding of DevOps/DevSecOps

• Ability to work in a complex and fast paced environment

• Ability to write, develop, and maintain technical documentation, including reference architecture and implementation plans

• Experience in the implementation of cyber solutions and standard methodologies

• Extensive know-how of security technology including, but not limited to, authentication and authorization, security protocols, cloud security, AI/ML

• Deep understanding of enterprise architecture and security frameworks like TOGAF, NIST, CIS, etc.

• Analyse industry, market, and technology trends and forecast impacts on the enterprise cybersecurity strategy

• Knowledge in the business principles of secure system design and experience of modern design techniques including simulations

• Strong written and verbal communications skills and proven experience in conveying direction effectively and clearly to both highly technical and non-technical audiences, including senior leadership

• Ability to work across boundaries, both organisationally and geographically

• Computer Science Degree

• CISSP

Preferred Qualifications 

• Advanced degree in Computer Science

• Experience in global pharma and/or a life sciences company

• CISM, CPP preferred

#GSKcso

Why GSK?

Uniting science, technology and talent to get ahead of disease together.

GSK is a global biopharma company with a special purpose – to unite scie