Senior Manager, Data Risk Office

Working with Us
Challenging. Meaningful. Life-changing. Those aren’t words that are usually associated with a job. But working at Bristol Myers Squibb is anything but usual. Here, uniquely interesting work happens every day, in every department. From optimizing a production line to the latest breakthroughs in cell therapy, this is work that transforms the lives of patients, and the careers of those who do it. You’ll get the chance to grow and thrive through opportunities uncommon in scale and scope, alongside high-achieving teams rich in diversity. Take your career farther than you thought possible.

Bristol Myers Squibb recognizes the importance of balance and flexibility in our work environment. We offer a wide variety of competitive benefits, services and programs that provide our employees with the resources to pursue their goals, both at work and in their personal lives. Read more: careers.bms.com/working-with-us.

Summary:

Bristol-Myers Squibb is looking for a Senior Manager, Data Risk Strategy to support our privacy & protection compliance readiness and sustainability efforts as part the Data Risk Office in Information technology.

The Senior Manager will work with the Data Risk Office and it’s stakeholders in complying with the requirements of the EU GDPR, US (Health and Privacy laws) and other applicable data protection & cyber laws/standards that affect BMS and its entities worldwide. 

Responsibilities:

• Strong experience in assessing, designing Data Risk Programs involving privacy, crown jewels and data de-risking objectives.

• Experienced in assessing Legal requirements and technical standards. 

• Creating policies and work instructions for operationalizing Data Risk Management programs.

• Create and harmonize data risk standards across various jurisdictions into common minimum standards.

• Proficient in creating and managing the data risk frameworks for supporting global privacy programs.

• Partner with executive leadership and business stakeholders and advise them on Data Risk Strategy.

• Creating Data Flow diagrams capturing business processes and capabilities.

• Review and assist with Supplier Assessments. 

• Monitoring compliance with regulations and internal policies.

• Coordinating & Co-operating with regulatory authorities on issues involving transfers of data, cyber incidents and privacy incidents.

• Reviewing third party and data processor contracts in conjunction with Legal.

• Implementing data transfer agreements / mechanisms.

• Reviewing and providing advice on assessments to business and IT stakeholders.

• Monitoring improvements to organizational and technical measures.

• Create and deliver training and awareness sessions.

• Working knowledge of tools like ServiceNow, OneTrust etc

• Demonstrable expert knowledge through continuing professional education, training courses, seminars and conferences in the Data Risk space.

Skills and Experience:

• 3+ years of working experience in a Data Privacy role performing legal analysis

• 3+ year of experience in Privacy Program Management and implementation 

• 3+ years of working knowledge of the EU GDPR/ LPPD / PIPL / LGPD / UK DPA 2018 etc

• Recognized qualifications in Data Privacy (CIPM preferred, also CIPP/E or CIPT an advantage)

• 5+ years experience with Microsoft Office tools, especially Excel, PowerPoint & SharePoint

• Ability to understand system and technical architecture to analyze data lineage and structures for performing data risk assessments

• Strong communication & presentation skills – written and oral

• Teamwork, attention to detail and problem solving

• Ability to deal with all levels of staff, particularly business users

• Ability to work with minimal supervision

• Ability to deliver to tight deadlines

If you come across a role that intrigues you but doesn’t perfectly line up with your resume, we encourage you to apply anyway. You could be one step away from work that will transform your life and career.

Uniquely Interesting Work, Life-changing Careers
With a single vision as inspiring as “Transforming patients’ lives through science™ ”, every BMS employee plays an integral role in work that goes far beyond ordinary. Each of us is empowered to apply our individual talents and unique perspectives in an inclusive culture, promoting diversity in clinical trials, while our shared values of passion, innovation, urgency,