Cyber Resiliency Manager – Pharma IT/OT Security

Bristol-Myers Squibb; Bothell (WA); Hybrid; USD 125,000 - 152,000; Full time

Benefits offered by this job

Health coverage

Wellbeing programs

401(k) plan

Paid time off

Job summary

Bristol Myers Squibb Bothell, WA is seeking a Cyber Resiliency Manager to protect site IT/OT and strengthen resilience of manufacturing systems. You will lead cyber risk initiatives, recovery planning, and regulatory-aligned controls to ensure continuous production and patient safety.

You will partner with IT, OT, QA and engineering teams, define RTOs/RPOs, and drive DR testing while strengthening MES/LIMS/ERP cybersecurity within a GxP framework.

Qualifications

• Minimum education of a bachelor’s degree in Cybersecurity, Computer Science, Engineering, or a related field is required.
• Minimum of five (5) years of experience in cybersecurity, OT security, or cyber resiliency, with at least three (3) years in a manufacturing or critical infrastructure setting is required.
• Strong understanding of OT/ICS environments, pharmaceutical manufacturing systems, and automation technologies.
• Demonstrated experience operating within a GxP-regulated environment (required).
• Familiarity with regulatory frameworks and expectations for cybersecurity in pharma (FDA, EMA).
• Familiarity with NIST CSF, IEC 62443 frameworks.
• Understanding of the Purdue Model or ISA/IEC OT network architecture.
• Hands-on experience with pharma manufacturing systems such as MES, LIMS, and ERP platforms (e.g., SAP).
• Strong stakeholder management and communication skills; ability to influence site leadership and cross-functional teams without direct authority.
• Experience developing and presenting risk reports, KPIs, and executive summaries.

Responsibilities

• Develop and execute a site-level cyber resiliency program, aligned with BMS policies and standards.
• Identify and assess cyber risks across IT, OT, automation, and MES/LIMS/ERP systems.
• Define and validate site-specific RTOs and RPOs for critical digital systems.
• Maintain and report site cyber resiliency KPIs and KRIs to leadership and enterprise cybersecurity.
• Lead or co-lead site cyber incident response processes and disaster recovery testing.
• Secure ICS/OT environments through patching, segmentation, and secure remote access.
• Collaborate with vendors to strengthen resilience of third-party technology.

Skills

Cybersecurity

OT security

GxP/regulatory

Regulatory compliance

Stakeholder management

Risk reporting

Incident response

Education

Bachelor's degree in Cybersecurity/CS/Engineering

Tools

MES

LIMS

ERP (SAP)

ICS/SCADA environments

Job description

Bristol Myers Squibb Bothell, WA is seeking a Cyber Resiliency Manager to protect site IT/OT and strengthen resilience of manufacturing systems. You will lead cyber risk initiatives, recovery planning, and regulatory-aligned controls to ensure continuous production and patient safety.

You will partner with IT, OT, QA and engineering teams, define RTOs/RPOs, and drive DR testing while strengthening MES/LIMS/ERP cybersecurity within a GxP framework.