Data Privacy & Protection Governance Lead

AbbVie; South San Francisco (CA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

401(k) plan

Paid time off

Health, dental, vision insurance

Parental leave

Job summary

AbbVie is seeking a Data Protection Specialist to strengthen data security controls and mature processes. You will collaborate with IT and business leaders, conduct control assessments, and drive governance under the Data Protection Office.

Ideal candidates have an engineering/computer science background and experience with security frameworks, data privacy regulations, and policy development. Remote/hybrid options may vary by location.

Qualifications

• Bachelor’s degree with 5 years of experience; OR Master’s degree with 4 years of experience in Information Security, Data Privacy, or IT Compliance.
• Familiarity with multiple information security control frameworks (NIST CSF, ISO 2700X, PCI-DSS, SWIFT, etc.).
• Experience with global and regional Data Privacy regulations (GDPR, HIPAA, CCPA).
• Experience aligning and testing information security controls and frameworks.
• Experience writing policies and procedures.
• Experience in a large, global organization in information security or data privacy.
• Strong project management, collaboration, communication, and organizational skills.
• Adept at communicating concepts to diverse audiences; strong written and verbal communication is critical.

Responsibilities

• Establish and maintain relationships with IT and business leaders to understand goals and plans; evaluate security requirements and risks.
• Conduct assessments of controls to ensure data protection measures are in place.
• Leverage AI to analyze data across file labeling, logs, and infrastructure to automate control assurance.
• Engage third-party vendors to assess security posture and remediation requirements.
• Develop knowledge of AbbVie information security policies and provide guidance across business units.
• Provide information security expertise to balance risk and business enablement.
• Provide reporting to management on potential data privacy risks and remediation plans.
• Act as point of contact for information security matters with purchasing, legal/privacy, or quality.

Skills

Data protection

Information security

Data privacy

IT compliance

Policy writing

Project management

Communication

Collaboration

Education

Bachelor’s degree

Master’s degree

Tools

NIST CSF

ISO 2700X

PCI-DSS

SWIFT

Cloud Controls Matrix

HITRUST

NIST 800-171

CIS Controls

Job description

AbbVie is seeking a Data Protection Specialist to strengthen data security controls and mature processes. You will collaborate with IT and business leaders, conduct control assessments, and drive governance under the Data Protection Office.

Ideal candidates have an engineering/computer science background and experience with security frameworks, data privacy regulations, and policy development. Remote/hybrid options may vary by location.