Senior ServiceNow Lead | GRC, SecOps & Privacy

Bristol-Myers Squibb Company; Princeton (NJ); On-site; USD 150,000 - 182,000; Full time

Benefits offered by this job

Wellbeing support

Retirement benefits

Insurance offerings

Flexible Time Off

Job summary

Bristol Myers Squibb is seeking a senior professional to lead end-to-end ServiceNow initiatives, acting as both business partner and technical architect for GRC, SecOps, and Legal Service Delivery modules. You will gather requirements, translate them into Agile stories, and drive platform migrations with clear acceptance criteria.

The role requires strong techno-functional abilities, CSA or equivalent GRC certifications, and experience in regulated industries.

Qualifications

• Degree in Computer Science, Information Systems, related field, or equivalent work experience.
• 8+ years of experience in IT Risk Management, GRC, Security Operations, or Compliance domains.
• Excellent communication and collaboration abilities to work effectively with cross-functional teams.
• Strong capability to operate in a techno-functional role, translating complex business needs into actionable Agile stories with precise acceptance criteria.
• Proven proficiency in at least two (preferably three) of GRC, SecOps, Third-Party Risk, Privacy, or Legal Service Delivery.
• Proven ability to manage relationships with multiple stakeholders and work independently in a fast-paced environment.
• Familiarity with vulnerability management processes and tools, such as Qualys, Wiz etc.
• Experience with Privacy Management tools such as OneTrust or ServiceNow Privacy Management.
• Experience leading platform migration or consolidation initiatives.
• ServiceNow Certified System Administrator (CSA) or relevant GRC certifications such as CRISC, CISA, or CISM.
• Experience in the pharmaceutical, life sciences, or a similarly regulated industry.

Responsibilities

• Independently lead initiatives end-to-end, acting as both the business partner and technical architect for ServiceNow solutions.
• Gather business requirements and translate them into Agile stories with clear acceptance criteria for the offshore development team.
• Design and architect scalable solutions within the ServiceNow platform across GRC, SecOps, and Legal Service Delivery modules.
• Manage relationships with process owners across GRC, SecOps, and Legal Service Delivery, handling day-to-day escalations.
• Partner with the OneTrust team to document current-state privacy workflows and translate them into ServiceNow Privacy Management requirements.
• Ensure feature parity, capture acceptance criteria, and support knowledge transfer during platform migrations.
• Coordinate User Acceptance Testing (UAT) with stakeholders and support change and release lifecycle management in ServiceNow.
• Prepare and present delivery metrics to leadership, coordinate with vendors, and support resource planning.
• Ensure clear communication and transparency within the team and stakeholders.
• Identify opportunities for new/improved architecture opportunities.
• Must be self-directed with proven ability to make mature decisions supported by thorough data and process analysis.

Skills

GRC

IT Risk Management

Security Operations

Compliance

Agile storytelling

Stakeholder management

Techno-functional translation

Platform migration

Education

Degree in Computer Science/Information Systems or equivalent

Tools

ServiceNow

OneTrust

Qualys

Wiz

CSA

Job description

Bristol Myers Squibb is seeking a senior professional to lead end-to-end ServiceNow initiatives, acting as both business partner and technical architect for GRC, SecOps, and Legal Service Delivery modules. You will gather requirements, translate them into Agile stories, and drive platform migrations with clear acceptance criteria.

The role requires strong techno-functional abilities, CSA or equivalent GRC certifications, and experience in regulated industries.