Job Description

BMS Hyderabad is an integrated global hub where our work is focused on helping patients prevail over serious diseases by building sustainable and innovative solutions. This important science, technology, and innovation center will support a range of technology and drug development activities that will help us usher in the next wave of innovation. Position Summary At Bristol Myers Squibb, we believe that responsible data management practices serve as the trusted foundation fueling innovation and transformation for our patients and customers. The ideal candidate will a member of the Data Risk Office\'s (DRO) Privacy Risk Operations team in BMS Hyderabad, managing and executing privacy operations for our business processes and supporting systems. The Sr Analyst will ensure SLA and process driven response to data subject rights requests, incidents and breaches, strategic assessments, maintenance of records of processing activities, assessment monitoring and reviews etc. The Sr Analyst will serve as a liaison between Privacy and business stakeholders including IT, Research & Development, Manufacturing, Commercial, Legal, and other departments to ensure that operational activities are executed in accordance with internal procedures and strong stakeholder buy in. The Sr Analyst will work closely with the one-up manager and peers to propose effective and efficient operational strategies. The Sr Analyst is organized, process oriented, manages deadlines effectively, a subject matter expert in privacy operations management, and partners well with Business and IT stakeholders. With proven abilities in managing concurrent privacy requests while contributing to the continuous improvement of DRO\'s operations effectiveness, standards, and processes. At BMS, digital innovation and Information Technology are central to our vision of transforming patients\' lives through science. To accelerate our ability to serve patients around the world, we must unleash the power of technology. We are committed to being at the forefront of transforming the way medicine is made and delivered by harnessing the power of computer and data science, artificial intelligence, and other technologies to promote scientific discovery, faster decision making, and enhanced patient care. If you want an exciting and rewarding career that is meaningful, consider joining our diverse team! Key Responsibilities Execution and monitoring of DRO\'s privacy operations. Collaborates with Privacy and business stakeholders for operations and owns task level deliverables (for - Data Subject Rights requests, Data Incident/Breach Notifications, Data Privacy Queries), root cause and investigational guidance, privacy risk mitigation standards, and other support to help streamline the privacy operations delivery objectives. Works with Privacy Legal, Data Protection Officers and other stakeholders to manage internal and external reporting. Triage, route, track, and manage the status, ownership, and completion of operational tasks relating to the live privacy programs. Works with stakeholders and other liaisons to help schedule meetings, create operations impact analysis with action follow-ups on deliverables. Assists with the review and update of Operational processes, metrics, prepares read-outs and other deliverables to help communicate and track operations progress and strategy for senior leadership. Coordinate and streamlines operational tasks using technology with a keen eye towards simplification and continuous improvement. Conduct analytics and research on the historical tickets to generate insights and data for decisions. Keeps up to date with evolution of regulations impacting privacy, ethics, and data. Experienced in configuring and working with various industry leading data and privacy tools like OneTrust. Experienced in systems integration methodologies and workflow management. Demonstrates critical thinking around interpreting business operations and industry challenges and recommending best practices-based solutions to improve products, processes, systems and reduce risk. Implement organizational IT controls in accordance with applicable regulations and the ability to evaluate and understand the impact of new regulations and requirements. Independent, self-starter that supports DRO staff in collaborative issue resolution and improvement. Preferred experience with working in a multi-cultural, multi-location and diverse environments. Qualifications & Experience B.E./B.Tech. or equivalent in computer science, engineering, life science field Recognized privacy / privacy management certifications and experience preferred. At least 4-6 years of privacy/risk/compliance operations management (regulated or healthcare or tech preferred). Knowledge of HIPAA, GDPR, CPRA, PIPL etc., and other privacy regulations is a must. Knows SQL, Excel (advanced techniques) and has worked with databases. Ability to make decisions that impact their own work & others and works under minimal supervision. Demonstrates openness to learning and developing. Takes a responsibility for their own and team\'s development and growth. Demonstrates an understanding of factors driving team performance and how they contribute to the team\'s overall success. Excellent English Oral and written communication skills including the ability to deliver clear and articulate presentations. Ability to use PowerPoint, Excel, Word, or other technologies to communicate complex topics to stakeholders, manage personal workload, and track projects and issues. #HYDIT #LI-Hybrid

foundit