Senior/Principal Product Analyst – Compliance

About the Team:

 

Enterprise Systems is the backbone of GSK’s internal operations in Digital & Tech, enabling GSK Global Functions teams such as Finance, Procurement, HR, Legal, Compliance, WREF, CGA and Corporate Secretariat to run seamlessly. This team designs and delivers cutting-edge digital platforms that power critical processes, ensuring efficiency, compliance, and scalability across the enterprise.    

 

Legal, Compliance & WREF Digital & Tech delivers digital solutions that support Legal & Compliance and Workplace Real Estate & Facilities (WREF). This team drives product roadmaps and manages platforms that safeguard GSK’s integrity and reputation globally. By joining this team, you’ll help shape systems that support thousands of employees worldwide, driving innovation and reliability in the tools that keep GSK moving forward. 

 

Job Purpose:

 

The Senior /Principal Product Analyst - Compliance supports the delivery of secure, effective, and compliant digital solutions by translating business strategy, pain points, and regulatory needs into clear, testable requirements. Working with the Compliance Product Owner and Solution Architect, they help shape solution options that align to product strategy, architectural guardrails, and cost considerations. The Compliance Product Analyst documents processes, designs technology-enabled use cases, and supports solution testing, adoption, and operational readiness. They contribute to continuous improvement and automation opportunities that enhance user experience, reduce effort, and enable measurable value for the Product.

This role operates under GSK's "Performance with Choice" hybrid working approach, typically expecting 2–3 days per week in the office, with the specific pattern agreed between the successful candidate and their manager based on role and team needs.

 

Key Responsibilities:

 

• Support the Compliance Product Owner to realise the Product strategy by eliciting and managing detailed business requirements (e.g., features, user stories) and designing technology-enabled use cases.
• Document as-is and to-be system processes, identifying opportunities for system, process, and workflow improvement, supported by impact analysis and basic data insights.
• Document functional and non-functional requirements for Compliance Products (e.g., security, performance, operability, accessibility), ensuring they are reflected in specifications and delivery plans.
• Document functional and technical specifications needed to deliver changes and support configuration or code delivery by providing clear design inputs; maintain configuration repositories and version updates where applicable.
• Support technical delivery teams by advising Developers and Test Analysts on expected system behaviour and acceptance criteria, informed by clear business and non-functional requirements.
• Perform functional and non-functional testing for delivered solutions and upgrades, ensuring the system fulfils requirements; support the creation of test cases and execution using test management tooling.
• Support configuration release management activities, adhering to release management policy, documenting version history, deployment notes, and release checklists.
• Develop user guides, configuration documentation, runbooks, and training materials; deliver training to key users or support teams to enable Product adoption and support readiness.
• Support the Compliance Product Owner to identify and document additional security, data privacy, and compliance considerations (e.g., sensitive data handling), liaising with relevant SMEs to embed required controls.
• Support onboarding into GSK systems and adherence to Portfolio and platform control requirements (e.g., compliance artefacts, access controls, operability standards).
• Support the Compliance Product Owner to identify and implement automation or workflow efficiency opportunities within the Product team, backed by basic usage metrics or adoption insights.
• Act as an escalation point for the Application Support team, advising on complex incidents and ensuring documentation and configuration records remain accurate for effective support and maintenance.
• Follow DTMS to ensure compliant product portfolio for our Compliance products
• Use approved AI tools in your day-to-day work to improve your own productivity and your team’s ways of working, sharing what works and applying sound judgement, including validating outputs and following GSK’s Responsible AI, privacy and security requirements.

 

Required Skills & Qualification:

 

• Bachelor’s or master’s degree in a relevant field (e.g., Computer Science, Information Technology, or Engineering), or equivalent experience.
• 10+ years’ experience in a business analysis or product-focused role supporting technology delivery.
• Experience supporting and deploying systems for a Compliance function including Enterprise Risk Management systems, third party risk management systems, privacy systems, data products support risk analytics & monitoring
• Experience with technologies such as Certa, OneTrust would be advantageous
• Experience eliciting and managing detailed business requirements in operational or complex business environments.
• Demonstrated ability to analyse business problems and develop technology-enabled use cases using structured methods.
• Experience supporting functional testing activities, including executing test cases and managing defects through to resolution.
• Familiarity with software engineering concepts, security considerations, and technology solutioning is beneficial.
• Experience in Pharmaceuticals or other regulated industries is desirable to support compliance, data integrity, and controlled business processes.
• Strong communication and stakeholder engagement skills, with the ability to collaborate effectively across business and technical teams.
• Industry certifications highly desirable (e.g. SAP certification in related area, Agile methodologies)

 

Preferred Skills:

 

• Strong attention to detail, ensuring requirements, specifications, and testing outcomes are accurately documented and traceable throughout delivery.
• Ability to translate complex business rules into clear system behaviour, configurations, and test scenarios.
• Proactive and curious mindset, able to investigate system issues, validate behaviour, and identify improvement opportunities.
• Effective communication skills, capable of explaining system constraints and technology implications in a way business stakeholders can understand.
• Comfortable working in a structured, process-driven environment, with an appreciation of compliance, data integrity, and controlled change management practices.
• Collaborative and team-oriented, supporting cross-functional work with Product Owners, Developers, Testers, and business users.

Skills

Agile Methodology, Backlogs, Cross-Functional Teamwork, Design Thinking, DevOps, Digital Solutions, Enterprise Risk Management (ERM), Privacy Compliance, Process Diagrams, Product Management, Product Strategies, Project Management, Requirements Gathering, Risk Monitoring, Services Management, Software Development, User Experience (UX), User Research, User Story

 

 

Why GSK?

Uniting science, technology and talent to get ahead of disease together.

GSK is a global biopharma company with a purpose to unite science, technology and talent to get ahead of disease together. We aim to positively impact the health of 2.5 billion people by the end of the decade, as a successful, growing company where people can thrive. We get ahead of disease by preventing and treating it with innovation in specialty medicines and vaccines. We focus on four therapeutic areas: respiratory, immunology and inflammation; oncology; HIV; and infectious diseases – to impact health at scale.

People and patients around the world count on the medicines and vaccines we make, so we’re committed to creating an environment where our people can thrive and focus on what matters most. Our culture of being ambitious for patients, accountable for impact and doing the right thing is the foundation for how, together, we deliver for patients, shareholders and our people.

Inclusion at GSK:

As an employer committed to Inclusion, we encourage you to reach out if you need any adjustments during the recruitment process.

Please contact our Recruitment Team at IN.recruitment-adjustments@gsk.com to discuss your needs.

Important notice to Employment businesses/ Agencies

GSK does not accept referrals from employment businesses and/or employment agencies in respect of the vacancies posted on this site. All employment businesses/agencies are required to contact GSK's commercial and general procurement/human resources department to obtain prior written authorization before referring any candidates to GSK. The obtaining of prior written authorization is a condition precedent to any agreement (verbal or written) between the employment business/ agency and GSK. In the absence of such written authorization being obtained any actions undertaken by the employment business/agency shall be deemed to have been performed without the consent or contractual agreement of GSK. GSK shall therefore not be liable for any fees arising from such actions or any fees arising from any referrals by employment businesses/agencies in respect of the vacancies posted on this site.

It has come to our attention that the names of GlaxoSmithKline or GSK or our group companies are being used in connection with bogus job advertisements or through unsolicited emails asking candidates to make some payments for recruitment opportunities and interview. Please be advised that such advertisements and emails are not connected with the GlaxoSmithKline group in any way.

GlaxoSmithKline does not charge any fee whatsoever for recruitment process. Please do not make payments to any individuals / entities in connection with recruitment with any GlaxoSmithKline (or GSK) group company at any worldwide location. Even if they claim that the money is refundable.

If you come across unsolicited email from email addresses not ending in gsk.com or job advertisements which state that you should contact an email address that does not end in “gsk.com”, you should disregard the same and inform us by emailing askus@gsk.com, so that we can confirm to you if the job is genuine.