{"id":3185521,"url":"https://alion.io/job/gsk-director-ai-ml-and-cloud-security","title":"Director, AI ML and Cloud Security","company":{"id":6649,"name":"GSK","domain":"gsk.com","url":"https://alion.io/company/gsk","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":86,"open_postings":56,"ghost_share":0,"stale_share":0.768,"repost_share":0.018,"time_to_fill_p50_days":17,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":184000,"max_usd":345000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":71},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"EU AI Act","optional":false},{"name":"LLM","optional":false},{"name":"NIST AI RMF","optional":false},{"name":"RAG","optional":false},{"name":"AI Agents","optional":true},{"name":"Azure","optional":true},{"name":"GCP","optional":true},{"name":"IAM","optional":true}],"status":"live","first_seen_at":"2026-10-23T23:32:36Z","employer_posted_date":"2026-10-23","last_verified_at":"2026-10-29T13:36:29Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"Director, AI ML & Cloud Security\nWhy Us!\nAt GSK, we unite science, technology and talent to get ahead of disease together. We are a global biopharma company with a special purpose - to unite science, technology and talent to get ahead of disease together. We’re proud to be leading a healthcare revolution, and we’re looking for people who can help us deliver on our ambition\nJob Purpose:\nOwn Cyber Architecture and Solutions's relationship with GSK's business functions, R&D and the Enterprise AI programme - the bridge between the technical AI function and the teams that use and build AI. You lead AI use-case intake and triage, assess proposals against security and architecture requirements, and route feasible cases into the Cyber Architecture and Solutions delivery pipeline.\nAbout the team: AI ML and Cloud Security is the function through which GSK is transforming security itself. The team designs and builds the agentic framework, a multi-agent platform moving security services across the Chief Security Office from rule-based to AI-driven operation. It owns AI architecture and AI engineering end to end: the agent layer, LLM orchestration, the AI and ML platform, and the data fabric pipeline that CAS designs, builds and tests before a managed service vendor operates it. The team also governs AI tool security posture, advises on cloud security across the Azure and GCP estate, and is the front door between GSK's business units and R&D and the technical AI function. AI security standards set here are binding on every AI initiative in GSK. Seventeen roles across the UK, India and the US.\nWhat makes this role different. The bridge between a technical AI security function and the business and R&D teams building with AI, and the job is translation in both directions. You will triage use-case proposals against AI architecture standards, classify them for EU AI Act exposure, and route the feasible ones into delivery - while telling senior scientists and business leaders no often enough that the relationship has to survive it. Shadow AI is a live problem here, and the route to fixing it is making the governed path faster than the ungoverned one, not blocking people.\nKey Responsibilities:\nThis role will provide you the opportunity to lead key activities to progress your career. These responsibilities include some of the following:\nOwn Cyber Architecture and Solutions's relationship with GSK business functions, R&D and the Enterprise AI programme, and be the single front door for AI security.\nLead AI use-case intake and triage: assess GenAI, RAG and agentic proposals against AI architecture standards and route the feasible ones into delivery.\nClassify use cases for EU AI Act exposure and apply the NIST AI RMF risk framing, including for AI embedded in GxP-validated and clinical contexts.\nOwn the intake decision - proceed, redesign or refuse - on every AI use case GSK's business units and R&D bring to the function, and sign the decisions the pipeline register records.\nRepresent the Cyber Architecture and Solutions security position in GSK's AI governance forums and in Responsible AI decision-making.\nOwn AI risk and prioritisation scoring across the use-case portfolio, so sequencing is evidence-based rather than loudest-voice.\nRun business-side shadow AI discovery and bring unsanctioned tools into governance by making the governed path faster, not by blocking people.\nHold the security position with R&D and business leadership when a funded AI programme cannot proceed as designed, and keep the relationship afterwards.\nHold the security line with senior scientists and business leaders, and escalate where a use case cannot proceed safely.\nSit on the Enterprise AI programme board and the Responsible AI council, and bring the quarterly demand forecast that sets AI Engineering's build priorities.\nWhy You!\nWe are seeking professionals with the following required skills and qualifications to help us achieve our goals:\nBasic Qualifications:\nDegree in a relevant discipline, or equivalent depth demonstrated through experience. \nSignificant experience in cyber security, AI governance or technology risk, including leading teams - domain focus: AI Business Facing (business unit and R&D AI engagement); owning the business-facing relationship for an enterprise AI programme\nLeading AI use-case intake and triage - assessing business and R&D AI proposals against security and architecture requirements and routing feasible use cases into delivery, with automated intake and tracking\nPartnering with the Enterprise AI team and AI governance forums, shaping GenAI, LLM and agent adoption decisions rather than reviewing after the fact\nTranslating AI security constraints into practical guidance for business projects and communicating the AI security roadmap to senior business stakeholders\nOwning business-side shadow AI discovery and driving remediation of unsanctioned AI tools through relationships, not enforcement alone\nPreferred Qualifications:\nEU AI Act, NIST AI RMF and ISO/IEC 42001 awareness in a regulated setting\nAI risk assessment and risk-based prioritisation of use cases - and automation of governance checks\nExperience telling an R&D leadership team that a funded AI programme cannot proceed as designed, and keeping the relationship.\nRegulated industry experience, ideally pharmaceutical (GxP)\nAI governance or privacy certification such as IAPP AIGP or CIPP/E\nReady to apply?\nReady to lead the future of secure AI and cloud technology? Join GSK and help us make a real difference in improving health worldwide. Apply today. We look forward to hearing from you. (Please take a personal copy of the Job Description, as this will not be available online post closure of the advert)\nClosing Date: 6th November 2026\nWorking Pattern\nThis role is based in the United Kingdom and offers a hybrid working model, with a min of 2/3 days a week onsite at our central London HQ.\n#GSKcso\nSkills\nAI for Cybersecurity, AI Governance, AI Platforms, Application Security, Cloud Security, Computer Programming, Data Security, EU AI Act, Feasibility Evaluation, Identity Access Management (IAM), Information Systems, Infrastructure Security, Microsoft Power Business Intelligence (PBI), ML Security, Operating Systems Security, Pipeline Management, Risk Assessments, Scripting, Security Engineering, Security Technologies, Security Testing, Use Cases, Vulnerability ManagementWhy GSK?\nUniting science, technology and talent to get ahead of disease together.\nGSK is a global biopharma company with a purpose to unite science, technology and talent to get ahead of disease together. We aim to positively impact the health of 2.5 billion people by the end of the decade, as a successful, growing company where people can thrive.\nWe get ahead of disease by preventing and treating it with innovation in specialty medicines and vaccines. We focus on four therapeutic areas: respiratory, immunology and inflammation; oncology; HIV; and infectious diseases - to impact health at scale.\nPeople and patients around the world count on the medicines and vaccines we make, so we’re committed to creating an environment where our people can thrive and focus on what matters most. Our culture of being ambitious for patients, accountable for impact and doing the right thing is the foundation for how, together, we deliver for patients, shareholders and our people.\nGSK is an Equal Opportunity Employer. This ensures that all qualified applicants will receive equal consideration for employment without regard to race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), parental status, national origin, age, disability, genetic information (including family medical history), military service or any basis prohibited under federal, state or local law.\nWe believe in an agile working culture for all our roles. If flexibility is important to you, we encourage you to explore with our hiring team what the opportunities are.\nShould you require any adjustments to our process to assist you in demonstrating your strengths and capabilities contact us at  where you can also request a call.\nPlease note should your enquiry not relate to adjustments, we will not be able to support you through these channels. However, we have created a Recruitment FAQ guide. Click the Link where you will find answers to multiple questions we receive\nImportant notice to Employment businesses/ Agencies\nGSK does not accept referrals from employment businesses and/or employment agencies in respect of the vacancies posted on this site. All employment businesses/agencies are required to contact GSK's commercial and general procurement/human resources department to obtain prior written authorization before referring any candidates to GSK. The obtaining of prior written authorization is a condition precedent to any agreement (verbal or written) between the employment business/ agency and GSK. In the absence of such written authorization being obtained any actions undertaken by the employment business/agency shall be deemed to have been performed without the consent or contractual agreement of GSK. GSK shall therefore not be liable for any fees arising from such actions or any fees arising from any referrals by employment businesses/agencies in respect of the vacancies posted on this site.\nPlease note that if you are a US Licensed Healthcare Professional or Healthcare Professional as defined by the laws of the state issuing your license, GSK may be required to capture and report expenses GSK incurs, on your behalf, in the event you are afforded an interview for employment. This capture of applicable transfers of value is necessary to ensure GSK’s compliance to all federal and state US Transparency requirements. For more information, please visit the Centers for Medicare and Medicaid Services (CMS) website at https://openpaymentsdata.cms.gov/","description_format":"text","description_chars":9939,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Hybrid work"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","Vaccines","Oncology Therapeutics","Infectious Disease Therapeutics"],"lifecycle":[{"event":"open","at":"2026-10-23T23:32:36Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":5,"expected_fill_days":17,"reasons":["conf:2","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/gsk-director-ai-ml-and-cloud-security","json_url":"https://alion.io/job/gsk-director-ai-ml-and-cloud-security.json","meta":{"generated_at":"2026-10-29T14:24:09Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21686,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6649},"rest":"https://alion.io/mcp/rest/get_company?id=6649"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgsk-director-ai-ml-and-cloud-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgsk-director-ai-ml-and-cloud-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgsk-director-ai-ml-and-cloud-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/gsk-director-ai-ml-and-cloud-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgsk-director-ai-ml-and-cloud-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3185521}},{"tool":"search_jobs","arguments":{"company":"gsk.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3185521},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}