Senior Risk Engineer, IT Risk Operations

Key Skills

Cyber Security, Data cleaning / Data cleansing, IT, Microsoft Office suites, Microsoft-Excel, Operations, PowerBI, Python Programming, SQL, Tableau

Job Description

At Bristol Myers Squibb, we are inspired by a single vision – transforming patients’ lives through science. In oncology, hematology, immunology, and cardiovascular disease – and one of the most diverse and promising pipelines in the industry – each of our passionate colleagues contribute to innovations that drive meaningful change. We bring a human touch to every treatment we pioneer. Join us and make a difference.

Position Summary

At BMS, digital innovation and Information Technology are central to our vision of transforming patients’ lives through science. To accelerate our ability to serve patients around the world, we must unleash the power of technology. We are committed to being at the forefront of transforming the way medicine is made and delivered by harnessing the power of computer and data science, artificial intelligence, and other technologies to promote scientific discovery, faster decision making, and enhanced patient care.

If you want an exciting and rewarding career that is meaningful, consider joining our diverse team!

The IT Risk Strategy and Operations team focuses on simplifying risk operations, enhancing efficiency and effectiveness, and embedding a culture of continuous improvement within the IT Risk organization. This team manages various exception processes related to risk reduction, acceptance, and remediation activities in partnership with other cyber and infrastructure teams. In addition, this team owns and manages various risk reporting, metrics and score cards that provide visibility into risk posture across different business units. We are looking for a new member as we continue helping business increase their confidence and ability to take smart risks.

To support this objective, the team is expanding their existing risk reporting program to promote risk quantification through data analysis to increase our confidence in risk response activities. We are looking for thoughtful data-oriented professionals to enable this mission. In this role, you will be analyzing large volumes of data from various sources across different dimensions of risk (technology, human, insider, privacy, third party etc) and visualizing how data can help inform risk-based decision making. To be successful in this role, we are looking for individuals who have hands-on experience building dashboards, passion for risk management, information security, metrics, visualizing risk data for people to consume and use effectively.

Key Responsibilities

• Partner with IT Risk Strategy and Operations lead to help expand our risk reporting and metrics program
• Consume and analyze large volumes of data and build meaningful and visually powerful dashboards to identify trends and enable risk decisions
• Participate in developing key risk indicators, provide inputs to the development of control indicators, and key performance indicators for various programs
• Manage and publish monthly risk metrics on PowerBI
• Participate in risk management, decision-making, and collaborative discussions
• Monitor and identify automation opportunities to improve the effectiveness of risk management processes
• Prepare and communicate operational metrics and trend analysis for the IT Risk Leadership Team
• Support the IT Risk Operations team in other areas to enable continuous risk reduction, remediation activities
• Use judgement to escalate exceptions and deferrals to respective business ISOs for decisions when needed
• Input, track, manage and report on Cyber Issues in ServiceNow GRC and ensure issues are tracked to completion within agreed upon timelines
• Engage and partner with other Cyber Engineering teams when needed to identify areas of risk associated to deferred vulnerabilities without appropriate business justifications
• Work with IT and business stakeholders to provide security guidance and promote a positive security mindset
• Identify new opportunities for improvement to processes and automation opportunities

Qualifications & Experience

• 3-5 years of information technology industry experience
• Experience with Tableau, PowerBI and other statistical and visualization tools
• Experience in relevant data collection, data cleaning, and data analysis techniques
• Experience with leveraging tools for data analytics, visualization to conduct analysis and produce dashboards
• Hands-on with SQL, data modeling, Microsoft PowerBI Publisher, Microsoft Excel and Office suite and at least one programming language (e.g., Python)
• Familiarity working with ServiceNow, querying data lakes effectively to prepare datasets for reporting and dashboards.
• Familiarity with NIST Cyber Risk Management Framework, common vulnerabilities and attack vectors are considered a plus
• Strong written and oral communication skills
• Collaborates and works with stakeholders to fulfill requests.​
• Explains own work clearly and explains any independent judgement well.​
• Demonstrates openness to learning and developing. Takes responsibility for their own development and growth.​
• Understands the team's performance and how their work may impact the team goal.​
• Collects and reviews data sources and tries to apply potential recommendations. Able to compile data in reviewing for data integrity/audits.​

Why You Should Apply

Around the world, we are passionate about making an impact on the lives of patients with serious diseases. Empowered to apply our individual talents and diverse perspectives in an inclusive culture, our shared values of passion, innovation, urgency, accountability, inclusion, and integrity bring out the highest potential of each of our colleagues.

Bristol Myers Squibb recognizes the importance of balance and flexibility in our work environment. We offer a wide variety of competitive benefits, services and programs that provide our employees with the resources to pursue their goals, both at work and in their personal lives.