Job Description

At Bristol Myers Squibb, we are inspired by a single vision – transforming patients’ lives through science. In oncology, hematology, immunology and cardiovascular disease – and one of the most diverse and promising pipelines in the industry – each of our passionate colleagues contribute to innovations that drive meaningful change. We bring a human touch to every treatment we pioneer. Join us and make a difference.

The Sr. Manager, Data Protection Investigations is a critical position in Cyber and Data Enablement and is responsible for daily monitoring of alerts originating from data loss prevention applications using various platforms. This position provides direct support to other Cyber and Data Enablement data protection teams. This role requires a high level of honesty, trust, confidentiality, and integrity by nature as it pertains to protecting company intellectual property. The successful candidate is self-motivated and results oriented. The successful candidate must also maintain a professional conduct and exercise high levels of good judgement, ethics, & discretion at all times. Deep understanding of data loss prevention tools and technologies to protect important company confidential and proprietary information to assist in reducing company risk is critical in this role.

Requirements & Responsibilities:

• Collaboratively interact with various stakeholders in Cyber and Data Enablement, Information Technology, Corporate Security and technology vendors.
• Analyze alerts originating from data loss prevention and SIEM applications for early detection and response actions.
• Triage escalated alerts to make decisions pertaining to levels of company risk.
• Prioritize and escalate data protection alerts as necessary using company ticketing system.
• Help troubleshoot technical issues with applications as they arise.
• Help continually improve data protection processes and procedures as BMS IT technologies continually evolve.
• Assist in the overall evolution of a comprehensive data protection program by offering suggestions related to continuous improvements and identifying any possible gaps to improve maturity level of the program.

Skills required:

• Deep knowledge of data protection processes and technologies.
• Understanding of insider risk concepts.
• Overall knowledge of Cybersecurity tools and technologies.
• Deep knowledge of Office 365 processing of e-mail such as Microsoft Office 365 Security & Compliance center.
• Deep knowledge of Microsoft’s suite of user-based applications like Office documents and Office 365 (OneDrive, SharePoint, Teams, Skype) as it pertains to general use and role in conducting data protection investigations.
• Knowledge of Security Information and Event Management (SIEM) tools.
• Knowledge of networking terminologies and data communication.
• Deep knowledge of  leading user behavior analytics (UBEA) capabilities.
• Knowledge of data loss prevention technologies such as Digital Guardian, McAfee, Symantec, etc.
• Experience with IT ticketing such as systems such as ServiceNow preferred.
• Problem solving and deductive reasoning skills.
• Communication and presentation skills.

Education & Experience:

• Bachelor’s degree in computer science or equivalent preferred.
• 5 years minimum experience in handling data loss prevention investigations required.
• Certified Information Systems Security Professional (CISSP) preferred.
• Strong interpersonal, oral and written communication skills.
• Experience in pharmaceutical industry preferred.

Around the world, we are passionate about making an impact on the lives of patients with serious diseases. Empowered to apply our individual talents and diverse perspectives in an inclusive culture, our shared values of passion, innovation, urgency, accountability, inclusion and integrity bring out the highest potential of each of our colleagues.

Bristol Myers Squibb recognizes the importance of balance and flexibility in our work environment. We offer a wide variety of competitive benefits, services and programs that provide our employees with the resources to pursue their goals, both at work and in their personal lives. 

Physical presence at the BMS worksite or physical presence in the field is an essential job function of this role which the Company deems critical to collaboration, innovation, productivity, employee well-being and engagement, and enhances the Company culture.

To protect the safety of our workforce, customers, patients and communities, the policy of the Company requires all employees and workers in the U.S. and Puerto Rico to be fully vaccinated against COVID-19, unless they have received an exception based on an approved request for a medical or religious reasonable accommodation.  Therefore, all BMS applicants seeking a role located in the U.S. and Puerto Rico must confirm that they have already received or are willing to receive the full COVID-19 vaccination by their start date as a qualification of the role and condition of employment.  This requirement is subject to state and local law restrictions and may not be applicable to employees working in certain jurisdictions such as Montana. This requirement is also subject to discussions with collective bargaining representatives in the U.S.

Our company is committed to ensuring that people with disabilities can excel through a transparent recruitment process, reasonable workplace adjustments and ongoing support in their roles. Applicants can request an approval of accommodation prior to accepting a job offer. If you require reasonable accommodation in completing this application or if you are applying to a role based in the U.S. or Puerto Rico and you believe that you are unable to receive a COVID-19 vaccine due to a medical condition or sincerely held religious belief, during or any part of the recruitment process, please direct your inquiries to adastaffingsupport@bms.com. Visit careers.bms.com/eeo-accessibility to access our complete Equal Employment Opportunity statement.

Any data processed in connection with role applications will be treated in accordance with applicable data privacy policies and regulations.