Director, Procurement, Third Party Risk Management

Working with Us
Challenging. Meaningful. Life-changing. Those aren’t words that are usually associated with a job. But working at Bristol Myers Squibb is anything but usual. Here, uniquely interesting work happens every day, in every department. From optimizing a production line to the latest breakthroughs in cell therapy, this is work that transforms the lives of patients, and the careers of those who do it. You’ll get the chance to grow and thrive through opportunities uncommon in scale and scope, alongside high-achieving teams. Take your career farther than you thought possible.

Bristol Myers Squibb recognizes the importance of balance and flexibility in our work environment. We offer a wide variety of competitive benefits, services and programs that provide our employees with the resources to pursue their goals, both at work and in their personal lives. Read more: careers.bms.com/working-with-us.

The Director of Third-Party Risk Management (TPRM) will oversee BMS Global Procurement’s global third-party risk management program, ensuring alignment with BMS’s policies, systems, and regulatory requirements. The role is critical for advancing and evolving the TPRM framework through strong strategic leadership, stakeholder engagement, efficient process management, and compliance oversight. This position will be responsible for driving continuous improvement within the TPRM program by identifying opportunities for enhancements, managing escalations, and supporting both regulatory and organizational priorities.

Major Responsibilities and Accountabilities:

Leadership and Governance

• Lead a team to oversee the sustainable and effective operation of the TPRM program framework, ensuring compliance with risk management and regulatory requirements.

• Plan and lead Steering Committee meetings to ensure alignment across business units and share progress updates.

• Represent the TPRM program in key forums, including the Audit and Risk Management Subcommittee (ARMSC), Business Continuity PMO, and IT Third Party Assessment Steering Committee.

• Serve as the primary point of contact for audits conducted by GIA, supporting audit requests and presenting TPRM updates.

Policy and Process Enhancements:

• Identify and drive changes to TPRM processes, policies, and tools, soliciting and integrating feedback from stakeholder groups such as FTPRM, Risk SMEs, SS&P, leadership, and business unit leaders.

• Ensure policies are up-to-date and reflective of evolving business needs, including updates to TPRM policy documents and the GxP SIMON taxonomy.

• Plan and prioritize ProcessUnity system changes, partnering with IT, Accenture, and other teams to ensure effective user testing, tool evolution, and adoption.

Stakeholder Engagement and Collaboration

• Act as an escalation point for TPRM process and tool-related issues/questions, assisting stakeholders with resolution when needed.

• Collaborate with internal and external stakeholders, including FTPRMs, Procurement team members, SMEs, Third-Party Service Providers, and ProcessUnity, to align on TPRM strategies, contracting approaches, and service delivery models.

• Foster strong partnerships with key stakeholders such as IT, legal, procurement, and other business units to enhance overall TPRM program effectiveness.

• Lead cross-functional efforts to address program challenges, update stakeholders on TPRM initiatives, and identify opportunities for improvement.

Training and Awareness

• Responsible for developing and delivering training materials and informational resources about the TPRM program (shared with designated team members) to drive organizational awareness and compliance.

• Promote education and engagement about TPRM processes across stakeholder groups.

Monitoring, Reporting, and Metrics

• Build and refine TPRM KPIs, reports, and dashboards to monitor compliance, stakeholder engagement, and program goals. Ensure procurement-related TPRM data is incorporated into SS&P dashboard reporting.

• Review reports summarizing TPRM status and follow up with stakeholders (e.g., FTPRMs) on overdue items where appropriate.

• Update and evolve TPRM reporting and KPIs based on feedback and shifting business needs.

• Develop leadership reporting for key stakeholders, such as the Audit Committee and CFO, as requested.

• Manage ad hoc stakeholder requests related to syst