Head of Data Risk & Protection Strategy

Bristol Myers Squibb; Princeton (NJ); On-site; USD 189,000 - 229,000; Full time

Benefits offered by this job

Health Insurance

401(k) plan

Paid Time Off

Wellbeing Programs

Job summary

Bristol Myers Squibb is seeking a Director of Data Risk & Protection to shape and lead the enterprise program across risk governance, data protection, and insider threat management. This role partners with Cybersecurity, Legal, HR, Compliance, and Business Units to implement strategy and drive measurable risk reduction.

The position requires a deep background in data protection, DLP, UEBA, IAM/PAM, and cloud security, with the ability to scale a matrixed organization globally from Princeton, NJ.

Qualifications

• Bachelor's degree required in Computer Science, Information Systems, Cybersecurity, Risk Management, or related discipline.
• Advanced degree (Master's or equivalent) preferred.

Responsibilities

• Define and lead the Data Risk & Protection strategy aligned to company risk appetite, regulatory requirements, and cybersecurity strategy.
• Design and operate the Data Risk & Protection operating model with team structure, roles, processes and tooling.
• Establish and evolve a comprehensive Data Risk & Protection program including policy governance, use-case development, monitoring, and remediation.
• Develop a multi-year capability roadmap with KPIs and risk-reduction metrics.
• Lead the scaling and maturation of the Data Risk & Protection function and build a high-performing team.
• Provide regular status reporting and risk posture updates to senior leadership and governance bodies.
• Establish insider threat monitoring and behavioral analytics capabilities to improve visibility and response.
• Oversee end-to-end insider risk case lifecycle across multiple stakeholders.

Skills

Data risk mgmt

Insider threat

DLP

UEBA

IAM & PAM

Cloud security

Stakeholder mgmt

Education

Bachelor's degree in CS/InfoSec/related

Advanced degree preferred

Tools

Microsoft 365 Security

Azure

AWS

SIEM

Purview / data governance

Job description

Bristol Myers Squibb is seeking a Director of Data Risk & Protection to shape and lead the enterprise program across risk governance, data protection, and insider threat management. This role partners with Cybersecurity, Legal, HR, Compliance, and Business Units to implement strategy and drive measurable risk reduction.

The position requires a deep background in data protection, DLP, UEBA, IAM/PAM, and cloud security, with the ability to scale a matrixed organization globally from Princeton, NJ.