Counsel, AI Governance, Law and Compliance

At Bristol Myers Squibb, our employees often ask, “Who are you working for?”—a question that fuels collaboration, accountability, and urgency in our work. Our purpose-driven culture inspires us to discover, develop, and deliver innovative medicines to prevail over serious diseases. We offer uniquely interesting and meaningful work, opportunities for growth, and a supportive environment that values inclusion, wellbeing, flexibility, and comprehensive benefits. This is work that transforms the lives of patients, and the careers of those who do it.Position SummaryThe Counsel, AI Governance, Law & Compliance provides day-to-day legal and compliance support for the design, development, deployment, and ongoing oversight of AI systems across the enterprise. Sitting within the AI, Data and Privacy Law and Compliance department and reporting to the Head of AI Governance, Law and Compliance, this role partners closely with Business Insights and Technology (BI&T), Privacy, Data Governance, and business stakeholders to operationalize the company's global AI governance framework. The Counsel translates evolving AI laws, regulations, and standards (e.g., EU AI Act, OECD Principles, NIST AI RMF, ISO/IEC 42001, CPPA ADMT, China PIPL) into practical guidance, reviews AI use cases for legal and ethical risk, and helps drive responsible AI adoption in a highly regulated life sciences environment.Key ResponsibilitiesProvide legal counsel on AI initiatives across the AI lifecycle, including intake review, risk classification, model development, deployment, monitoring, and decommissioning.Conduct and document AI legal risk assessments covering intellectual property, privacy, bias and fairness, transparency, safety, accountability, and third-party risk.Support implementation of the enterprise AI governance framework, including model inventory, lifecycle controls, human oversight protocols, and incident response workflows.Track and interpret global AI laws, regulations, guidance, and standards, and translate them into actionable policies, playbooks, standards, and training materials.Review and negotiate AI-related contractual provisions with vendors, partners, and customers, including data use, model training, indemnities, and audit rights.Advise on generative AI and high-risk AI use cases, including R&D, commercial, medical, manufacturing, and enabling functions.Partner with Privacy Law & Compliance on intersecting issues such as automated decision-making, profiling, cross-border data transfers, and data subject rights.Support engagement with regulators, industry groups, and standards bodies, and contribute to internal thought leadership on responsible AI.Help design and deliver AI governance and compliance training for legal, compliance, and business audiences.Maintain clear documentation to support audit readiness, regulatory inquiries, and governance maturity assessments.QualificationsJD (or equivalent legal degree) and active bar membership in at least one U.S. jurisdiction required.5-7 years of combined legal experience at a top law firm or in-house.Minimum 2 years of substantive experience in AI legal and compliance or AI governance.Working knowledge of key AI laws and frameworks, including the EU AI Act, NIST AI RMF, ISO/IEC 42001, OECD AI Principles, and U.S. federal and state AI guidance.Demonstrated ability to translate complex regulatory requirements into pragmatic, business-aligned guidance.Strong drafting, analytical, and stakeholder management skills, with the ability to operate independently in a fast-moving, cross-functional environment.Sound judgment and discretion in handling novel, ambiguous, and high-visibility issues.Preferred SkillsCIPP (e.g., CIPP/US, CIPP/E) and/or IAPP AIGP certification preferred.Prior experience in the pharmaceutical, biotechnology, healthcare, or life sciences industry.Familiarity with privacy laws and frameworks (e.g., GDPR, HIPAA, CCPA/CPRA, China PIPL) and their intersection with AI.Experience with AI assurance artifacts (model cards, system cards, impact assessments) and governance tooling.Working understanding of machine learning concepts, data science workflows, and digital product development.Experience supporting third-party/vendor AI risk reviews and contracting.Engagement with industry working groups, standards bodies, or responsible AI forums.Comfort using AI-enabled tools to enhance legal workflows and efficiency.#LI_HybridWe hire for skills and capabilities, not just credentials – if this role excites you, but doesn’t perfectly match your resume, we encourage you to apply anyway.Compensation Overview:Brisbane - CA - US: $222,250 - $269,314 Cambridge Crossing: $222,250 - $269,314 Madison - Giralda - NJ - US: $202,050 - $244,831 Princeton - NJ - US: $202,050 - $244,831 San Diego - CA - US: $222,250 - $269,314 Washington DC - US: $202,050 - $244,831 The starting pay range(s) listed above is for full-time employees (FTE). You may also be eligible for additional discretionary incentive cash and stock opportunities. We determine starting pay thoughtfully – carefully considering the nature of the role, required skills, work location, schedule and the knowledge and experience you bring. Final compensation is guided by pay equity principles and applicable employment laws. Compensation programs are reviewed on an ongoing basis and may be adjusted over time to reflect evolving market factors, and individual, team or Company performance.Benefits:Subject to the terms and conditions of the applicable plans then in effect, you may be eligible to participate in our comprehensive benefit plans – including wellbeing support, retirement and financial protection benefits, and insurance offerings (medical, dental, vision, life and disability).U.S.-based exempt employees are eligible for Flexible Time Off (FTO), which provides paid time off without a set accrual limit, subject to manager approval, along with 11 paid company holidays each year.Non-exempt employees, RayzeBio employees, and employees located in Puerto Rico receive 160 hours of paid vacation annually for new hires (subject to manager approval), 11 paid company holidays, and 3 optional holidays.Depending on eligibility, employees may also have access to additional time-off benefits, including paid sick leave, up to two paid volunteer days per year, summer hours flexibility, and leaves of absence for medical, personal, parental, caregiver, bereavement, or military needs. Eligible employees also enjoy an annual Global Shutdown between Christmas Day and New Year's Day.U.S.-based job seekers can explore full benefit offerings at How We WorkWhere you work matters – because collaboration, innovation and patient impact happen in many settings. Our roles are structured across four work models: site-essential, site-by-design, field-based and remote-by-design. The model assigned to this role is based on its core responsibilities. Learn more at Supporting People with DisabilitiesBMS is dedicated to ensuring that people with disabilities can excel through a transparent recruitment process, reasonable workplace accommodations/adjustments and ongoing support in their roles. Applicants can request a reasonable workplace accommodation/adjustment prior to accepting a job offer. If you require reasonable accommodations/adjustments in completing this application, or in any part of the recruitment process, direct your inquiries to View email address on click.appcast.io. Visit careers.bms.com/eeo-accessibility to access our complete Equal Employment Opportunity statement.Candidate RightsBMS will consider qualified applicants with arrest and conviction records, pursuant to applicable laws in your area.For roles based in Los Angeles County only: If you live in or expect to work from Los Angeles County if hired for this position, please visit this page for important additional information: Data ProtectionWe will never request payments, financial information, or social security numbers during our application or recruitment process. Learn more about protecting yourself at .Any data processed in connection with role applications will be treated in accordance with applicable data privacy policies and regulations.If this posting is missing required information required by local law or incorrect, contact BMS at View email address on click.appcast.io the Job Title and Requisition number. Do not send application-related inquiries to this email. To check your application status, please login to your Candidate Home Account.R1603348 : Counsel, AI Governance, Law and ComplianceSummaryLocation: Princeton - NJ - US; Cambridge - MA - US; Madison - Giralda - NJ - US; San Diego - CA - US; Washington DC - US; Brisbane - CAType: Full time