Analyst/Sr. Analyst - Global HR Solutions - Compliance & AI Governance

At Lilly, the work is demanding because patients are waiting. We unite caring with discovery to help make life better for people around the world, knowing that every decision, every detail, and every day matters. Headquartered in Indianapolis, Indiana, our over 50,000 employees around the globe take on complex challenges to discover and deliver life-changing medicines, strengthen how health is understood and managed, and support the communities we serve. This is hard, urgent, selfless work—but it’s work worth doing. If you’re driven by purpose and ready to bring your best to work that truly matters for patients, we invite you to join us.
This role supports compliance for HR Solutions across a defined set of countries. It contributes to what controls need to be in place, checks that they are working, supports in spotting where the risks are, and keeps the approach up to date as HR uses more AI. It also supports the process for reviewing, approving and monitoring AI and automation used across the employee lifecycle. The role is accountable for checking controls against the agreed standard but does not run the day-to-day controls or deliver the technology.
Key Responsibilities
Compliance framework
· Contributes to the design, coherence and effectiveness of the HR Solutions compliance framework end to end, alongside HRS leadership — access management, business continuity, integrity assessment, documentation control and personnel history file governance.
· Contribute to the scope, standard and cadence for recurring control activity and help assure the quality of delivery.
· Support in maintaining a current view of compliance risk across defined set of regions, escalating and highlighting where local legal, works council or data protection requirements diverge from the global standard.
· Identify control gaps arising from process, system or organisational change and advocate for remediation, supporting those remediation activities to closure with accountable owners.
· Act as internal point for compliance judgement calls, escalating where needed, and maintain the documented rationale for positions taken.
AI and automation governance
· Support the HR Solutions AI governance framework, aligned to best practise, and integrated with enterprise privacy and cyber requirements.
· Maintain the register of AI and automated capabilities in use across HR Solutions, with risk tier, intended use, data accessed, accountable owner and review cadence.
· Apply the assessment gate before any AI capability touches HR data or employee-facing processes, covering data minimisation, purpose limitation, decision transparency and mandatory human oversight points.
· Assess the risks of every AI tool used in people decisions, keep those assessments up to date, and redo them whenever the tool or how it's used changes significantly.
· Maintain the documentation a regulator or auditor would request, collected on a defined schedule rather than assembled reactively.
· Run ongoing monitoring of AI-enabled processes in production — error patterns, drift, disparate outcomes across employee populations — with defined escalation thresholds.
· Assess the risks of vendor AI tools before HR adopts them, including how they handle employee data and which countries' laws apply.
· Provide independent challenge to automation proposals. Provide input and challenge on automation proposals from a compliance mindset.
Governance, assurance and capability
· Advocate for HR Solutions compliance and assist in ensuring HR Solutions obligations under enterprise compliance, privacy and cyber frameworks are met.
· Coordinate periodic assurance activities, including integrity assessment, BCP and BIA, ensuring the quality of what is submitted.
· Provide compliance input of cyber security incident response where HR data or processes are affected.
· Maintain an informed external view of regulatory direction and emerging practice in HR compliance and AI governance, and highlight any potential impact on the framework to HRS Leadership
· Build compliance literacy across HR Solutions, including practical guidance on acceptable AI use in daily work.
· Convert recurring findings into recommendations that support structural improvements rather than repeat remediation.
Interface with the DSAR Centre of Excellence
· DSAR delivery sits outside this role. The compliance framework nonetheless sets the data protection and AI governance standard against which DSAR processing operates, including any AI applied to search or redaction.
· Provide periodic assurance over DSAR decision defensibility and act as escalation point where a DSAR decision raises a framework-level question.
Qualifications & Experience:
· 5+ years compliance, risk, audit or data protection experience in a regulated environment, ideally covering workforce data.
· Working knowledge of GDPR applied across multiple jurisdictions, with practical understanding of where local variation materially changes the obligation.
· Experience contributing to control framework design and operating effectively within one. Sufficient technical literacy to interrogate how an automated system reaches an output, what data it draws on and where it fails. Not an engineering role, but not one that can accept external assurances at face value.
· Ability to hold a position under delivery pressure, and judgement to distinguish material risk from theoretical risk.
Lilly is dedicated to helping individuals with disabilities to actively engage in the workforce, ensuring equal opportunities when vying for positions. If you require accommodation to submit a resume for a position at Lilly, please complete the accommodation request form (https://careers.lilly.com/us/en/workplace-accommodation) for further assistance. Please note this is for individuals to request an accommodation as part of the application process and any other correspondence will not receive a response.
Lilly does not discriminate on the basis of age, race, color, religion, gender, sexual orientation, gender identity, gender expression, national origin, protected veteran status, disability or any other legally protected status.
Actual compensation will depend on a candidate’s education, experience, skills, and geographic location. The anticipated wage for this position is
€32,250 - €82,610
Full-time equivalent employees may also be eligible for a company bonus (depending, in part, on company and individual performance). In addition, Lilly offers a comprehensive benefit program to eligible employees, including eligibility to participate in a pension plan; vacation benefits; eligibility for healthcare benefits; flexible benefits (if applicable) life insurance and death benefits; certain time off and leave of absence benefits; and well-being benefits (e.g., employee assistance program, fitness benefits, and employee clubs and activities). Lilly reserves the right to amend, modify, or terminate its compensation and benefit programs in its sole discretion and Lilly’s compensation practices and guidelines will apply regarding the details of any promotion or transfer of Lilly employees.
#WeAreLillyUKandIreland