Data Protection & Privacy Strategist

AbbVie; Cambridge (MA); On-site; USD 120,000 - 180,000; Full time

Job summary

AbbVie Inc. is seeking a Data Protection Specialist to ensure AbbVie information security policies and procedures are implemented across the organization.

You will support the Data Protection Office, drive control auditing, and mature governance and assurance processes with a focus on data privacy and AI-enabled efficiency. The role interfaces with multiple internal groups and external vendors, requiring strong communication skills and the ability to translate complex security concepts for

Qualifications

• Bachelor’sDegree with 5 years of experience in Information Security, Data Privacy, or IT Compliance.
• Familiarity with information security control frameworks (NIST CSF, ISO 2700X, PCI-DSS, SWIFT, CCMM, HITRUST, NIST 800-171, CIS Controls).
• Familiarity with GDPR, HIPAA, and CCPA data privacy regulations.
• Experience aligning and testing information security controls and frameworks.
• Experience writing policies and procedures.
• Experience in information security or data privacy in a large, global organization.
• Strong project management, collaboration, communication, and organizational skills.
• Adept at communicating concepts to diverse audiences; strong written and verbal communication.

Responsibilities

• Establish and maintain relationships with IT and Business leaders to understand goals and security requirements.
• Conduct assessments of controls to ensure data protection measures.
• Leverage AI to analyze data and automate control assurance.
• Engage third-party vendors to assess security posture and remediation.
• Develop knowledge of AbbVie information security policies and compliance processes.
• Provide information security guidance to business leaders and IT owners.
• Report potential data privacy risks and remediation plans to management.
• Act as contact for information security matters for purchasing, legal/privacy, and quality.
• Review policies for continued applicability and propose improvements.

Skills

Information security

Data privacy

IT compliance

Project management

Communication

Policy communication

Education

Bachelor’s degree

Master’s degree

Tools

NIST Cybersecurity Framework

ISO 2700X

PCI-DSS

SWIFT

Cloud Controls Matrix

HITRUST

NIST 800-171

CIS Controls

Job description

AbbVie Inc. is seeking a Data Protection Specialist to ensure AbbVie information security policies and procedures are implemented across the organization.

You will support the Data Protection Office, drive control auditing, and mature governance and assurance processes with a focus on data privacy and AI-enabled efficiency. The role interfaces with multiple internal groups and external vendors, requiring strong communication skills and the ability to translate complex security concepts for