Bristol Myers Squibb seeks a Senior Risk Analyst to provide high-level judgment on complex IT and emerging technology risks, guide framework evolution, and serve as a trusted advisor to leadership and cross-functional teams on cyber, AI, privacy, and regulatory risk matters.

Responsibilities

Serve as senior analytical authority for complex, high-tier risk cases and provide advisory support to IT leadership, legal, and business stakeholders
Monitor patterns across risk assessments to identify systematic accuracy gaps and framework refinements needed
Lead engagement with senior project sponsors, architects, and compliance teams on high-risk or high-complexity assessments
Ensure audit-ready documentation standards and validate GRC records for accuracy and completeness
Mentor junior analysts and model judgment-driven, review-first behavior in an automation-enabled environment

Requirements

5–10 years of IT risk management, cybersecurity risk, IT audit, or privacy compliance experience
Demonstrated senior-level risk judgment on complex, ambiguous, and high-stakes determinations
Deep knowledge of NIST frameworks (Cyber Risk Management, 800-53) and major privacy regulations (GDPR, EU AI Act, GxP, CCPA)
Advanced proficiency with GRC platforms such as ServiceNow GRC
Strong executive communication skills for presenting findings to senior leadership and audit audiences
Experience with AI/ML, automation, and emerging technology risk in digital transformation contexts

Senior Risk Analyst

Start with your email