Director CyberSecurity Data Protection and Insider Risk

Profile

Bristol-Myers Squibb is a global Biopharma company committed to a single mission: to discover, develop, and deliver innovative medicines focused on helping millions of patients around the world in disease areas such as oncology, cardiovascular, immunoscience and fibrosis.

Join us and make a difference. We hire the best people and provide them with a work environment that places a premium on diversity, integrity, collaboration and personal development. Through a culture of inclusion, we create a better, more productive work environment. We believe that the diverse experiences and perspectives of all our employees help to drive innovation and transformative business results.

Bristol-Myers Squibb is a global biopharmaceutical company whose mission is to discover, develop and deliver innovative medicines that help patients prevail over serious diseases.

One shared journey is moving us forward at Bristol-Myers Squibb. Around the world, we are passionate about making an impact on the lives of patients with serious disease. Empowered to apply our individual talents and ideas so that we can learn and grow together. Driven to make a difference, from innovative research to hands-on community support. Bristol-Myers Squibb recognizes the importance of balance and flexibility in our work environment. We offer a wide variety of competitive benefits, services and programs that provide our employees the resources to pursue their goals, both at work and in their personal lives.

Overview:

The Director of Data Protection and Insider Risk is responsible for developing the overall strategy and execution of BMS's Data Protection Program in conjunction with other stakeholder groups,. The position includes establishing an overall data protection framework, establishing an overall governance and an operating model, rationalizing product toolsets, and influencing the modification of business processes and controls for enhanced data protection.

This position will lead the data protection team and work with technology partners and business units to on-board data protection functions as well as develop cross-functional capabilities.

With support from their leadership, the candidate will promote the program and identify new sensitive data elements for protection, and develop a roadmap for program enhancements to address emerging threats.

The candidate should have a deep technical understanding of general data security disciplines as well as extensive experiences in enterprise level data loss prevention, digital rights management and user behavior analytics.

He or she must be familiar with security industry standards and best-practices, and must be able to effectively work with development, engineering and system counterparts, across a broad deeply technical environment in all security areas. This role will coordinate with application and system owners on all aspects of data protection solution lifecycle through proof of concept, business analysis and financial modeling, architecture design to solution deployment. The Director will support their leadership by ensuring all data protection solutions and technologies are properly supported, implemented and sufficiently meet the needs for which they are deployed to protect BMS confidential and proprietary data.

Core Responsibilities :

Oversee the Data Protection team, consisting of direct and indirect reports, including management of managed service provider staff. Responsibilities could include hiring, training, staff development, performance management, and crisis/incident support.

Develop and maintain strategy and policy documents based on sensitive data protection requests that map to BMS' business requirements and regulatory/privacy requirements

Partner with internal and external stakeholders such as Cyber Forensics, Corporate Security and Enterprise Data, Privacy and Legal as part of execution and program enhancement

Participate in advisory bodies and industry peer working groups to stay abreast of latest technologies and emerging threats.

Ensure compliance with industry and regulatory standards including local laws at global locations.

Sustain high-availability service levels and ensure fulfillment of business-wide service levels and operational support objectives. Skills and Qualifications:

Bachelor's degree or equivalent is a plus.

Certifications:Relevant cyber security certifications, such as CISSP, CISM and/or PMP are highly desired

Strong expertise in building data protection programs, preferably with global healthcare experience

Strong knowledge of data privacy regulations and guidelines such as GDPR, PCI, CCPA etc.

Experience to build digital capabilities in an accelerated timeframe to support business needs

Ability to lead a technical staff working on very sensitive subject areas and with highly sensitive information

Experience with change management lifecycle, development and regular preparation of management status and metrics reports

Should have strong focus on process and to support audit discussions

Ability to professionally handle confidential matters with appropriate judgement around escalation

Excellent verbal and written communication skills to translate the vision and strategy into clear priorities and direction, both internally and externally

Years of Experience:Generally requires 10 years related experience. Specifically 10 years in data security (DLP, DRM and data classification), with at least 5 years of direct people management experience.

Working knowledge or familiarity with Cloud security and CASB and how to apply Data Protection to SaaS and Cloud solutions. Bristol-Myers Squibb recognizes the importance of balance and flexibility in our work environment. We offer a wide variety of competitive benefits, services and programs that provide our employees the resources to pursue their goals, both at work and in their personal lives. Company: Bristol-Myers Squibb Req Number: R1522064_EN Updated: 2020-02-28 00:00:00.000 UTC Location: Princeton,New Jersey

Bristol Myers Squibb is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status, pregnancy, citizenship, marital status, gender expression, genetic information, political affiliation, or any other characteristic protected by law.

Company info

Bristol-Myers Squibb Company
Website : http://www.bms.com