> Markdown version of [/jobs/ext/3901935-director-ai-ml-and-cloud-security](https://www.wearedevelopers.com/jobs/ext/3901935-director-ai-ml-and-cloud-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Director, AI ML and Cloud Security

- **Company:** GSK
- **Location:** London, UK
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Microsoft Azure, Cloud Computing Security, Cyber Security, Information Systems, Computer Programming, Data Security, Identity and Access Management, Software Vulnerability Management, Scripting, Retrieval-Augmented Generation, Delivery Pipeline, Large Language Models, Multi-Agent Systems, IT Architecture, Software Security, AI Platforms, Operating System Security, Artificial Intelligence Markup Language (AIML), GXP
- **Published:** October 24, 2026
- **Apply:** https://www.apply4u.co.uk/jobs/director-ai-ml-and-cloud-security/53580766

## About the Role

Degree in a relevant discipline, or equivalent depth demonstrated through experience.

Significant experience in cyber security, AI governance or technology risk, including leading teams - domain focus: AI Business Facing (business unit and R&D AI engagement); owning the business-facing relationship for an enterprise AI programme

Leading AI use-case intake and triage - assessing business and R&D AI proposals against security and architecture requirements and routing feasible use cases into delivery, with automated intake and tracking

Partnering with the Enterprise AI team and AI governance forums, shaping GenAI, LLM and agent adoption decisions rather than reviewing after the fact

Translating AI security constraints into practical guidance for business projects and communicating the AI security roadmap to senior business stakeholders

Owning business-side shadow AI discovery and driving remediation of unsanctioned AI tools through relationships, not enforcement alone

Preferred Qualifications:
EU AI Act, NIST AI RMF and ISO/IEC 42001 awareness in a regulated setting

AI risk assessment and risk-based prioritisation of use cases - and automation of governance checks

Experience telling an R&D leadership team that a funded AI programme cannot proceed as designed, and keeping the relationship.

Regulated industry experience, ideally pharmaceutical (GxP)

AI governance or privacy certification such as IAPP AIGP or CIPP/E, AI for Cybersecurity, AI Governance, AI Platforms, Application Security, Cloud Security, Computer Programming, Data Security, EU AI Act, Feasibility Evaluation, Identity Access Management (IAM), Information Systems, Infrastructure Security, Microsoft Power Business Intelligence (PBI), ML Security, Operating Systems Security, Pipeline Management, Risk Assessments, Scripting, Security Engineering, Security Technologies, Security Testing, Use Cases, Vulnerability Management

## Description

Own Cyber Architecture and Solutions's relationship with GSK's business functions, R&D and the Enterprise AI programme - the bridge between the technical AI function and the teams that use and build AI. You lead AI use-case intake and triage, assess proposals against security and architecture requirements, and route feasible cases into the Cyber Architecture and Solutions delivery pipeline.
About the team: AI ML and Cloud Security is the function through which GSK is transforming security itself. The team designs and builds the agentic framework, a multi-agent platform moving security services across the Chief Security Office from rule-based to AI-driven operation. It owns AI architecture and AI engineering end to end: the agent layer, LLM orchestration, the AI and ML platform, and the data fabric pipeline that CAS designs, builds and tests before a managed service vendor operates it. The team also governs AI tool security posture, advises on cloud security across the Azure and GCP estate, and is the front door between GSK's business units and R&D and the technical AI function. AI security standards set here are binding on every AI initiative in GSK. Seventeen roles across the UK, India and the US.

What makes this role different. The bridge between a technical AI security function and the business and R&D teams building with AI, and the job is translation in both directions. You will triage use-case proposals against AI architecture standards, classify them for EU AI Act exposure, and route the feasible ones into delivery - while telling senior scientists and business leaders no often enough that the relationship has to survive it. Shadow AI is a live problem here, and the route to fixing it is making the governed path faster than the ungoverned one, not blocking people.

Key Responsibilities:
This role will provide you the opportunity to lead key activities to progress your career. These responsibilities include some of the following:
Own Cyber Architecture and Solutions's relationship with GSK business functions, R&D and the Enterprise AI programme, and be the single front door for AI security.

Lead AI use-case intake and triage: assess GenAI, RAG and agentic proposals against AI architecture standards and route the feasible ones into delivery.

Classify use cases for EU AI Act exposure and apply the NIST AI RMF risk framing, including for AI embedded in GxP-validated and clinical contexts.

Own the intake decision - proceed, redesign or refuse - on every AI use case GSK's business units and R&D bring to the function, and sign the decisions the pipeline register records.

Represent the Cyber Architecture and Solutions security position in GSK's AI governance forums and in Responsible AI decision-making.

Own AI risk and prioritisation scoring across the use-case portfolio, so sequencing is evidence-based rather than loudest-voice.

Run business-side shadow AI discovery and bring unsanctioned tools into governance by making the governed path faster, not by blocking people.

Hold the security position with R&D and business leadership when a funded AI programme cannot proceed as designed, and keep the relationship afterwards.

Hold the security line with senior scientists and business leaders, and escalate where a use case cannot proceed safely.

Sit on the Enterprise AI programme board and the Responsible AI council, and bring the quarterly demand forecast that sets AI Engineering's build priorities.

Why You!
We are seeking professionals with the following required skills and qualifications to help us achieve our goals