Associate Director - Global Business Risks & Controls

At Lilly, we unite caring with discovery to make life better for people around the world. We are a global healthcare leader headquartered in Indianapolis, Indiana. Our employees around the world work to discover and bring life-changing medicines to those who need them, improve the understanding and management of disease, and give back to our communities through philanthropy and volunteerism. We give our best effort to our work, and we put people first. We’re looking for people who are determined to make life better for people around the world.

Actual compensation will depend on a candidate’s education, experience, skills, and geographic location.  The anticipated wage for this position is

$126,000 - $184,800

Associate Director – Business Risks & Controls – US Consumer

Join our Lilly Business Insights & Analytics (BI&A) Team, a group of 150+ professionals with diverse backgrounds and experiences.  We drive relevant, real-time, data-driven business decisions across marketing, sales, medical affairs, and other functions in Lilly USA, leading to Best-in-Class customer engagements that enhance patient outcomes and business performance.

Lilly is undergoing a transformation journey to redefine the customer experience.  By leveraging personalized customer insights across our brands, we are creating a unified and seamless customer journey across all channels and audiences. 

As the Associate Director – Business Risks & Controls, you will accelerate this transformation by leading our Risk & Controls Assurance Program, setting the business context, and driving the strategic vision for continuous controls monitoring for the US Consumer Team. 

In this role, you will be responsible for managing first line risk and controls within the Global Customer Office (GCO), and identifying and mitigating cybersecurity and privacy risks in line with the company’s standards.  You will also provide subject matter expertise and technical guidance to technology-aligned process owners, ensuring that implemented controls are operating effectively and in compliance with regulatory, legal, and industry standards.

By partnering with various stakeholders, including Product Owners, Business Control Managers, and Auditors, you will contribute to the reporting of a comprehensive view of GCO’s risk posture and its impact on the business. Your advanced knowledge of control frameworks and risk management practices will enable you to drive innovative solutions and ensure effective controls are implemented to match risk to tolerance in a dynamic and evolving risk landscape.  You will need to be comfortable working with a wide range of stakeholders including senior management and foster trusted relationships across technology, risk, privacy, and control organizations.

Key Responsibilities: 

• Create and manage the first line Risk & Controls Assurance Program for the Global Customer Office ensuring a sustainable and disciplined end-to-end control environment and serve as the primary business liaison to second line teams

• Establish GCO’s control framework process including the identification, classification and review of the control environment

• Proactively monitor and evaluate control effectiveness, define key control indicators, identify gaps, and recommend enhancements to strengthen risk posture

• Recognized technical authority for GCO privacy and cyber controls

• Support technical, legal and compliance teams in the quality, completeness and accuracy of enterprise control frameworks applied to the GCO organization (ex: NIST and Process, Risk & Control frameworks) for Personal Information including Sensitive Personal Information

• Partner with control and process owners to recommend corrective actions and improvements, provide challenge to ensure appropriate escalation in accordance with Issue Management and Escalation policies

• Responsible for incident management processes associated with controls

• Ensure effective identification, quantification, communication, and management of GCO’s risks, focusing on root cause analysis and resolution recommendations

• Develop and maintain robust relationships, becoming a trusted partner with second line teams, technologists, assessment teams, and data officers to facilitate cross-functional collaboration and progress toward shared goals

• Execute reporting and governance of controls, policies, issue management, and measurements, offering senior management insights into control effectiveness and inform governance work

• Provide expertise and understanding of regulatory environment and new developments; develop and recommend action plans for initiatives that have regulatory impact

• Apply specialized knowledg