Summary

Bristol Myers Squibb is a global biopharmaceutical company dedicated to discovering, developing, and delivering innovative medicines that help patients prevail over serious diseases. Founded in 1887 and headquartered in Princeton, New Jersey, the company operates with a unique BioPharma strategy that combines the reach and resources of a major pharmaceutical company with the entrepreneurial spirit and agility of a biotech firm. BMS focuses on transformative therapies in key therapeutic areas including oncology, hematology, immunology, cardiovascular disease, and fibrosis. The company has built a sustainable pipeline of potential therapies and leverages translational medicine and data analytics to deliver the right medicine to the right patient at the right time. With over 10,000 employees worldwide, Bristol Myers Squibb maintains a strong commitment to scientific excellence, patient-centric innovation, and global health equity through its foundation. The company's portfolio includes groundbreaking treatments such as Opdivo (nivolumab) for cancer, Eliquis (apixaban) for cardiovascular conditions, and Orencia (abatacept) for autoimmune diseases, among others.

Job description

Key Responsibilities

Independently lead initiatives end-to-end, acting as both the business partner and technical architect for ServiceNow solutions.
Gather business requirements and translate them into Agile stories with clear acceptance criteria for the offshore development team.
Design and architect scalable solutions within the ServiceNow platform across GRC, SecOps, and Legal Service Delivery modules.
Manage relationships with process owners across GRC, SecOps, and Legal Service Delivery, handling day-to-day escalations.
Partner with the OneTrust team to document current-state privacy workflows and translate them into ServiceNow Privacy Management requirements.
Ensure feature parity, capture acceptance criteria, and support knowledge transfer during platform migrations.
Coordinate User Acceptance Testing (UAT) with stakeholders and support change and release lifecycle management in ServiceNow.
Prepare and present delivery metrics to leadership, coordinate with vendors, and support resource planning.
Ensure clear communication and transparency within the team and stakeholders.
Identify opportunities for new/improved architecture opportunities.
Must be self-directed with proven ability to make mature decisions supported by thorough data and process analysis.

Qualifications & Experience

Degree in Computer Science, Information Systems, related field, or equivalent work experience.
8+ years of experience in IT Risk Management, GRC, Security Operations, or Compliance domains.
Excellent communication and collaboration abilities to work effectively with cross-functional teams.
Strong capability to operate in a techno-functional role, translating complex business needs into actionable Agile stories with precise acceptance criteria.
Proven proficiency in at least two (preferably three) of the following areas: GRC, SecOps, Third-Party Risk, Privacy, or Legal Service Delivery.
Proven ability to manage relationships with multiple stakeholders and work independently in a fast-paced environment.
Familiarity with vulnerability management processes and tools, such as Qualys, Wiz etc.
Experience with Privacy Management tools such as OneTrust or ServiceNow Privacy Management.
Experience leading platform migration or consolidation initiatives.
ServiceNow Certified System Administrator (CSA) or relevant GRC certifications such as CRISC, CISA, or CISM.
Experience in the pharmaceutical, life sciences, or a similarly regulated industry.

Requirements

Degree in Computer Science, Information Systems, related field, or equivalent work experience.
8+ years of experience in IT Risk Management, GRC, Security Operations, or Compliance domains.
Excellent communication and collaboration abilities to work effectively with cross-functional teams.
Strong capability to operate in a techno-functional role, translating complex business needs into actionable Agile stories with precise acceptance criteria.
Proven proficiency in at least two (preferably three) of the following areas: GRC, SecOps, Third-Party Risk, Privacy, or Legal Service Delivery.
Proven ability to manage relationships with multiple stakeholders and work independently in a fast-paced environment.
Familiarity with vulnerability management processes and tools, such as Qualys, Wiz etc.
Experience with Privacy Management tools such as OneTrust or ServiceNow Privacy Management.
Experience leading platform migration or consolidation initiatives.
ServiceNow Certified System Administrator (CSA) or relevant GRC certifications such as CRISC, CISA, or CISM.
Experience in the pharmaceutical, life sciences, or a similarly regulated industry.

Benefits

Wellbeing support
Retirement benefits
Financial protection benefits
Medical, Dental & Vision
Life insurance
Disability insurance
Flexible Time Off
Paid company holidays
Paid sick leave
Paid volunteer days
Summer hours flexibility
Leaves of absence
Annual global shutdown

Company overview

Bristol Myers Squibb is a global biopharmaceutical company dedicated to discovering, developing, and delivering innovative medicines that help patients prevail over serious diseases. Founded in 1887 and headquartered in Princeton, New Jersey, the company operates with a unique BioPharma strategy that combines the reach and resources of a major pharmaceutical company with the entrepreneurial spirit and agility of a biotech firm. BMS focuses on transformative therapies in key therapeutic areas including oncology, hematology, immunology, cardiovascular disease, and fibrosis. The company has built a sustainable pipeline of potential therapies and leverages translational medicine and data analytics to deliver the right medicine to the right patient at the right time. With over 10,000 employees worldwide, Bristol Myers Squibb maintains a strong commitment to scientific excellence, patient-centric innovation, and global health equity through its foundation. The company's portfolio includes groundbreaking treatments such as Opdivo (nivolumab) for cancer, Eliquis (apixaban) for cardiovascular conditions, and Orencia (abatacept) for autoimmune diseases, among others.