This role pays more than
62%
of similar roles. Most pay
$158,557–$226,601
— the shaded band above.
At the midpoint, this role pays about
$209k
versus about
$193k
for comparable roles.
Based on 239 similar postings.
Employer
About Bristol Myers Squibb
Bristol Myers Squibb is a global biopharmaceutical company committed to discovering, developing and delivering innovative medicines to patients.
Bristol Myers Squibb currently has
31 open roles
on FindRole.
Listed pay typically runs
$137,530–$166,654
across 31 roles with salary data.
As a Director of Data Risk and Protection at BMS, you will lead the development and execution of an enterprise-wide data risk and protection strategy that aligns with regulatory requirements and broader cybersecurity goals. Your responsibilities include designing and implementing an operating model for data risk management, establishing comprehensive programs for policy governance and incident response, and developing multi-year capability roadmaps. You will work closely with technical teams to operationalize insider threat monitoring and analytics capabilities, oversee the end-to-end lifecycle of insider risk cases, and ensure timely and proportionate incident responses. Additionally, you will manage BMS’s enterprise DLP program across various platforms, govern data classification policies, and collaborate with Legal, HR, Compliance, and Privacy teams to develop and maintain data protection policies. This role requires 10+ years of experience in cybersecurity and data risk management, strong technical fluency in tools like SIEM, UEBA, DLP, and cloud security platforms, and expertise in legal and privacy considerations relevant to the pharmaceutical industry.