Senior Governance Engineer in London

The Onyx Research Data Platform organization represents a major investment by GSK R&D and Digital & Tech, designed to deliver a step-change in our ability to leverage data, knowledge, and prediction to find new medicines. We are a full‑stack shop consisting of product and portfolio leadership, data engineering, infrastructure and DevOps, data / metadata / knowledge platforms, and AI/ML and analysis platforms, all geared toward:

• Building a next-generation data experience for GSK’s scientists, engineers, and decision-makers, increasing productivity, and reducing time spent on “data mechanics”.
• Providing best-in-class AI/ML and data analysis environments to accelerate our predictive capabilities and attract top-tier talent.
• Aggressively engineering our data at scale to unlock the value of our combined data assets and predictions in real-time.

A Senior Governance Engineer is a leading technical contributor who can consistently take a loosely defined business or technical requirement, architect and build it to a well‑defined specification, and execute on it at a high level. You have a strong focus on metrics, both for the impact of your work and for its inner workings / operations. As a Senior Governance Engineer, you will play a crucial role in ensuring our product teams produce reliable, scalable, and secure infrastructure and applications. You will collaborate closely with the platform infrastructure and data operations teams to implement security and governance products within our existing technological infrastructure. You should be deeply familiar with the tools and processes associated with security and governance for regulated industries and able to work with stakeholders to translate those requirements to build efficient and user-friendly products.

Key responsibilities include:

• Design and deploy scalable and reliable governance solutions using a mix of existing technologies, open‑source tools, and newly identified integrations.
• Build and maintain an automated policy engine that integrates with existing authorization systems, uses policy as code, is cloud‑native (GCP), and integrated with the other Onyx Platforms and frameworks.
• Enable governance by design and implementation of user‑friendly products through the use of computational and automatable engines and integrations with existing data platforms and pipelines, metadata, and authorization systems.
• Understand, amplify with Onyx and integrate requirements from security and internal regulatory teams to ensure compliance with security policies and regulations as part of the governance products.
• Collaborate with cross‑functional teams to understand business requirements and translate them into scalable and efficient governance products.
• Use standard agile development SDLC processes for development management, CI/CD, and automation for infrastructure provisioning and deployment processes.
• Stay updated with the latest trends and best practices in security, governance, and data governance and contribute to the continuous improvement of our overall infrastructure and data platform.
• Provide technical guidance and mentorship to junior team members, fostering a collaborative and knowledge‑sharing culture within the organisation.
• Troubleshoot and resolve governance related issues and provide technical support to internal teams.

Basic Qualifications: We are looking for professionals with these required skills to achieve our goals:

• Bachelors degree.
• Knowledge and use of one or more programming languages: e.g., Go, Python, Scala, Java.
• Experience in utilizing any cloud-based data governance solutions, like Open Policy Agent (OPA), Strya-DAS, Immuta, Privacera, Gatekeeper, AWS Data Governance tools, Google Cloud Data Catalog/DataPlex, or Microsoft Azure Purview, to manage and govern data across various cloud environments.
• Experience with Policy and Compliance monitoring.

Preferred Qualifications: If you have the following characteristics, it would be a plus:

• Extensive knowledge of computational data governance, data security, compliance regulations, and industry best practices.
• Experience with managing authorization and authentication as code, integrating with Enterprise role‑based access tools.
• Experience with implementing attribute‑based access control.
• Demonstrated experience building reusable components on top of the CNCF ecosystem including Kubernetes (or similar ecosystem).
• Experience in modern software development tools / ways of working (e.g. git/GitHub, devops tools, metrics / monitoring).
• Cloud experience (e.g., AWS, Google Cloud, Azure, Kubernetes), including infrastructure‑as‑code.
• Application experience of CI/CD implementations using git and a common CI/CD stack (e.g. Jenkins, CircleCI, GitLab, Azure DevOps).
• Demonstrated excellence with agile software development environments using tools like Jira and Confluence.
• Passionate about data‑management and governance/privacy best practice.

GSK is a global biopharma company with a purpose to unite science, technology and talent to get ahead of disease together. We aim to positively impact the health of 2.5 billion people by the end of the decade, as a successful, growing company where people can thrive. We get ahead of disease by preventing and treating it with innovation in specialty medicines and vaccines. We focus on four therapeutic areas: respiratory, immunology and inflammation; oncology; HIV; and infectious diseases – to impact health at scale. People and patients around the world count on the medicines and vaccines we make, so we’re committed to creating an environment where our people can thrive and focus on what matters most. Our culture of being ambitious for patients, accountable for impact and doing the right thing is the foundation for how, together, we deliver for patients, shareholders and our people.