Data Protection & Privacy Architect

AbbVie; Worcester (MA); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Benefits package

401(k) plan

Paid time off

Job summary

AbbVie is seeking a Data Protection Specialist to help ensure AbbVie information security policies and controls are properly implemented across the organization. You will support the Data Protection Office, audit controls, and drive governance, development, security logging, automation, and responsible AI use to mature data protection processes.

The role interfaces with multiple internal units, including Commercial, R&D, Audit, Legal, and Purchasing, to provide subject matter expertise and

Qualifications

• Familiarity with, and experience using, a variety of information security control frameworks.
• Familiarity with global and regional Data Privacy regulations such as GDPR, HIPAA, and CCPA.
• Experience aligning and testing information security controls and frameworks.
• Experience writing policies and procedures.
• Experience working in information security or data privacy in a large, global organization.

Responsibilities

• Establish and maintain relationships with IT and Business leaders to understand goals and programs.
• Conduct assessments of controls to ensure data protection controls are in place.
• Leverage AI to analyze data across logs and datasets to automate control assurance.
• Engage Third Party Vendors to assess security posture and remediation.
• Provide guidance on AbbVie information security policies and compliance processes.

Skills

Information security

Project management

Communication

Policy writing

Collaboration

Organizational skills

Education

Bachelor’s Degree in InfoSec/Data Privacy/IT Compliance

Master’s Degree in InfoSec/Data Privacy/IT Compliance

Tools

NIST CSF

ISO 2700X

PCI-DSS

HITRUST

Job description

AbbVie is seeking a Data Protection Specialist to help ensure AbbVie information security policies and controls are properly implemented across the organization. You will support the Data Protection Office, audit controls, and drive governance, development, security logging, automation, and responsible AI use to mature data protection processes.

The role interfaces with multiple internal units, including Commercial, R&D, Audit, Legal, and Purchasing, to provide subject matter expertise and