Site Name: Bengaluru Luxor North Tower Posted Date: May 9 2025 The Information Security Awareness Senior Analyst is responsible for supporting GSK’s global security awareness and training programs, educating all personnel and contractors of security threats they face in their jobs, and how to defend against them. Information Security Awareness Senior Analyst will also be responsible for supporting a global phishing assessment program under the direction of Information Security Awareness Senior Manager. This position develops and executes global and targeted security awareness campaigns virtually and measures the effectiveness of the campaigns. The objective of this position is to ensure that the security awareness program is effectively changing behaviors so our personnel act in a secure manner. Key Responsibilities: Provide comprehensive coordination and administrative support for the social engineering attacks, e.g. phishing, and simulations programme. Responsible for supporting that programme and coordinating any learning interventions that are required for people who fall for the simulations. Coordination of all activities related to communication to staff at all levels of the organisation, managing internal and customer-focused communications, assisting with data collection and analysis, creating learning assets and awareness materials Conducting detailed project activities, tracking progress, and reporting the outcomes Collaborate with internal GSK stakeholders and managed service partners’ representatives to recommend necessary security awareness to effectively mitigate risks to GSK Minimum Level of Job-Related Experience Required 5 to 10 years of proven experience in cyber security and/or third party security risk management Additional Responsibilities Evangelize security awareness processes across business lines to help influence a strong culture of proactive awareness Monitor and identify the top human risks to our organization and the behaviors we need to change to mitigate those risks Implement and support a positive security awareness program, which focuses on changing behaviors both at work and at home Support the creation and procurement of awareness deliverables and learning content, leveraging various channels for effective delivery in our global organization, measures the usage of the content and its effectiveness, and develops metrics Creating awareness materials with outputs of attack simulations and learning status as a result of consequence management piece. Developing Information Security awareness training and materials aligned to the risks associated with end users Developing content with technical subject matter experts using a clear and concise writing style that is appropriate to the intended audience Developing metrics to measure the success of the security awareness program Creating and cooperating with Third Party Vendor on simulating social engineering attacks across all GSK employees targeted for certain wave. Training administration Managing the information protection mailbox and coordinating responses back to employees Working closely with Global Learning & Development (GLD) to schedule and conduct various learning events Managing the translation of content and media into multiple languages Coordinating updates to InfoSec website Inclusion at GSK: As an employer committed to Inclusion, we encourage you to reach out if you need any adjustments during the recruitment process. Please contact our Recruitment Team at [email protected] to discuss your needs. Why GSK? Uniting science, technology and talent to get ahead of disease together. GSK is a global biopharma company with a special purpose – to unite science, technology and talent to get ahead of disease together – so we can positively impact the health of billions of people and deliver stronger, more sustainable shareholder returns – as an organisation where people can thrive. We prevent and treat disease with vaccines, specialty and general medicines. We focus on the science of the immune system and the use of new platform and data technologies, investing in four core therapeutic areas (infectious diseases, HIV, respiratory/ immunology and oncology). Our success absolutely depends on our people. While getting ahead of disease together is about our ambition for patients and shareholders, it’s also about making GSK a place where people can thrive. We want GSK to be a place where people feel inspired, encouraged and challenged to be the best they can be. A place where they can be themselves – feeling welcome, valued, and included. Where they can keep growing and look after their wellbeing. So, if you share our ambition, join us at this exciting moment in our journey to get Ahead Together. Important notice to Employment businesses/ Agencies GSK does not accept referrals from employment businesses and/or employment agencies in respect of the vacancies posted on this site. All employment businesses/agencies are required to contact GSK's commercial and general procurement/human resources department to obtain prior written authorization before referring any candidates to GSK. The obtaining of prior written authorization is a condition precedent to any agreement (verbal or written) between the employment business/ agency and GSK. In the absence of such written authorization being obtained any actions undertaken by the employment business/agency shall be deemed to have been performed without the consent or contractual agreement of GSK. GSK shall therefore not be liable for any fees arising from such actions or any fees arising from any referrals by employment businesses/agencies in respect of the vacancies posted on this site. It has come to our attention that the names of GlaxoSmithKline or GSK or our group companies are being used in connection with bogus job advertisements or through unsolicited emails asking candidates to make some payments for recruitment opportunities and interview. Please be advised that such advertisements and emails are not connected with the GlaxoSmithKline group in any way. GlaxoSmithKline does not charge any fee whatsoever for recruitment process. Please do not make payments to any individuals / entities in connection with recruitment with any GlaxoSmithKline (or GSK) group company at any worldwide location. Even if they claim that the money is refundable. If you come across unsolicited email from email addresses not ending in gsk.com or job advertisements which state that you should contact an email address that does not end in “gsk.com”, you should disregard the same and inform us by emailing [email protected], so that we can confirm to you if the job is genuine.