At Lilly, we unite caring with discovery to make life better for people around the world. We are a global healthcare leader headquartered in Indianapolis, Indiana. Our employees around the world work to discover and bring life-changing medicines to those who need them, improve the understanding and management of disease, and give back to our communities through philanthropy and volunteerism. We give our best effort to our work, and we put people first. We’re looking for people who are determined to make life better for people around the world.
Associate Director - Risk Engineer, Global Digital Engagement
Consumers possess an increasingly digital attitude, and the majority expect real-time answers in their life. The need to engage in digital channels to connect and communicate with consumers is growing and becoming more sophisticated by the day. The digital engagement / consumer space is continuously evolving – new products in the marketplace, new platforms, changes to existing platforms, shifts in user loyalty, new data to report and new ways to interact with customers. Lilly recognizes the need to be present in Direct to Consumer (DTC) marketing and also Disease state awareness through digital channels such as Social Media (Facebook, LinkedIn, YouTube, Instagram, TikTok, WeChat, WhatsApp, Line etc., Websites, Search Engine Marketing (SEM)). We strive to meet the needs of today’s consumers when and where they want to engage.
The Global Digital Engagement team is globally focused and effectively building solutions / capabilities for Marketing, Corporate Affairs and Medical organizations. The team owns all the consumer platforms, capabilities for the platforms and tech governance for consumer platforms.
The Associate Director - Risk Engineer, Global Digital Engagement in Indianapolis, IN is embedded within their respective teams and trained to perform risk engineering duties. The role is also a single point of contact for product teams and a liaison with the various risk partners at Eli Lilly.
In addition to performing their standard duties, this role helps ensure that the business is aware of risks in their areas, the impact it has on their area, and is responsible for driving the necessary work within their areas to appropriately address the risk (avoidance, acceptance, remediation, transfer).
This role is critical to build a strong privacy risk culture and effectively manage cybersecurity and privacy/compliance risks, as well as be accountable for the technical delivery and design of digital compliance-related solutions at Lilly.
How You Will Succeed:
- Design and architect existing and future-state compliance-related solutions
- Lead technical teams to deliver and support compliance-related solutions
- Drive maturity and standardization of technical solutions in the compliance space at Lilly today
- Act as liaison for all risk partners (compliance, privacy, cyber, legal, audit) to drive compliance with enterprise policies and standards, partnering closely with defined compliance business leads
- Coordinate activities between product teams and risk partners
- Train teams on risks that need to be addressed as part of product design and architecture
- Work closely with risk partners to implement appropriate processes and controls to align with documented policies and standards
- Document decisions during design and implementation of processes and controls
- Facilitate risk profile creation, gather information, and act as a central point of contact to ensure requirements are implemented properly and operating effectively
- Manage findings (gaps to standards) for product teams in their area as defined in the findings workflow processes
- Facilitate and identify required risk escalations to second line of defense governance committees for review/decision
- Review and monitor risk profiles and implement controls after production deployment
- Facilitate all activities within NIST-defined ‘Authorization to Operate’ process
- Maintain current asset inventory and product risk profile for products in their area
- Appropriately tag code in repositories
Your Basic Qualifications:
- Bachelor’s degree or equivalent experience
- 7+ years’ experience with cloud-based software engineering – including oversight of large-scale development efforts.
- 7+ years' experience with web-based software development
- 7+ years' experience marketing, advertising, and web analytics.
- Experience in applying quality and compliance requirements, especially in regulated software development.
- Ability to work across the organization, act as a change agent, and support cybersecurity and privacy strategic transformation
What You Should Bring:
- Previous engineering experience and certifications/SME in cybersecurity and/or privacy engineering (CISSP, CISM, CIPP, CIPT, CRISC, etc.)
- Global understanding of how cookies function on externally facing solutions
- Web marketing, social media, and online promotion experience will be acknowledged
- Familiarity with technical architecture associated with databases and analytics environments.
- Excellent knowledge of HTML/CSS, JavaScript, and UI/UX design principles.
- Experience with JavaScript frameworks, such as React or Vue.
- Experience with Platform as a service (PaaS), web server management (ADOBE, AWS, Heroku, etc.), and web server frameworks (Express, Koa, etc.)
- Self-management and ability to work autonomously and with ambiguity
- Vendor resource project oversight
- A high level of intellectual curiosity, external perspective, and innovation interest
- Strong analytical, problem solving and investigative skills
- Solid background in Information Technology with demonstrated ability to quickly learn new technology and business process
- Demonstrated interpersonal skills, teamwork and people development
- Ability to communicate proactively and effectively with IT and business stakeholders
Additional Information:
Lilly is dedicated to helping individuals with disabilities to actively engage in the workforce, ensuring equal opportunities when vying for positions. If you require accommodation to submit a resume for a position at Lilly, please complete the accommodation request form ( https://careers.lilly.com/us/en/workplace-accommodation ) for further assistance. Please note this is for individuals to request an accommodation as part of the application process and any other correspondence will not receive a response.
Lilly is an EEO/Affirmative Action Employer and does not discriminate on the basis of age, race, color, religion, gender, sexual orientation, gender identity, gender expression, national origin, protected veteran status, disability or any other legally protected status.
Our employee resource groups (ERGs) offer strong support networks for their members and help our company develop talented individuals for future leadership roles. Our current groups include: Africa, Middle East, Central Asia Network, African American Network, Chinese Culture Network, Early Career Professionals, Japanese International Leadership Network (JILN), Lilly India Network, Organization of Latinos at Lilly, PRIDE (LGBTQ + Allies), Veterans Leadership Network, Women’s Network, Working and Living with Disabilities. Learn more about all of our groups.
#WeAreLilly