Data Protection Specialist

AbbVie Inc.; Cambridge (MA); On-site; USD 120,000 - 180,000; Full time

Job summary

AbbVie Inc. is seeking a Data Protection Specialist to ensure AbbVie information security policies and procedures are implemented across the organization.

You will support the Data Protection Office, drive control auditing, and mature governance and assurance processes with a focus on data privacy and AI-enabled efficiency. The role interfaces with multiple internal groups and external vendors, requiring strong communication skills and the ability to translate complex security concepts for

Qualifications

• Bachelor’sDegree with 5 years of experience in Information Security, Data Privacy, or IT Compliance.
• Familiarity with information security control frameworks (NIST CSF, ISO 2700X, PCI-DSS, SWIFT, CCMM, HITRUST, NIST 800-171, CIS Controls).
• Familiarity with GDPR, HIPAA, and CCPA data privacy regulations.
• Experience aligning and testing information security controls and frameworks.
• Experience writing policies and procedures.
• Experience in information security or data privacy in a large, global organization.
• Strong project management, collaboration, communication, and organizational skills.
• Adept at communicating concepts to diverse audiences; strong written and verbal communication.

Responsibilities

• Establish and maintain relationships with IT and Business leaders to understand goals and security requirements.
• Conduct assessments of controls to ensure data protection measures.
• Leverage AI to analyze data and automate control assurance.
• Engage third-party vendors to assess security posture and remediation.
• Develop knowledge of AbbVie information security policies and compliance processes.
• Provide information security guidance to business leaders and IT owners.
• Report potential data privacy risks and remediation plans to management.
• Act as contact for information security matters for purchasing, legal/privacy, and quality.
• Review policies for continued applicability and propose improvements.

Skills

Information security

Data privacy

IT compliance

Project management

Communication

Policy communication

Education

Bachelor’s degree

Master’s degree

Tools

NIST Cybersecurity Framework

ISO 2700X

PCI-DSS

SWIFT

Cloud Controls Matrix

HITRUST

NIST 800-171

CIS Controls

Job description

Company Description

AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas including immunology, oncology and neuroscience - and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us at www.abbvie.com. Follow @abbvie on LinkedIn, Facebook, Instagram, XandYouTube.

Job Description

TheData ProtectionSpecialistworks with various internal and external groups to ensure that AbbVie information security policies, practices, and procedures are properly implemented within AbbVie.Theysupport the Data Protection Office in strengthening company data security controls and maturing operational processes.The individual willinterface witha wide variety of people from different internal organizational units, interface with organizational personnel and staff to ensure that the policy is understood by thoserequiredto implement,monitor, and enforce the policy.This role is designedfor aprofessional with an engineering, computer science, software development, or related technical background who is interested in the business, governance, andassurance aspects of data security. Under the guidance of the Data Protection Office, the role willdrivecontrol auditing, assurance activities, governance, development, security logging, automation, and the responsible use of artificial intelligence to improve efficiency, consistency, and maturity of data protection processes.

Responsibilities:

• Establish andmaintainstrong relationships with IT and Business group leaders to understand goals,programs,and plans. Evaluate and articulate program security requirements;identifypotential security risk factors and business impact.
• Conduct assessments of controls to ensure data protectioncontrols arein place.
• Leverage AI to analyze volumes of data across File Labeling, Applicationlogs,and infrastructure datasets toautomatecontrol assurance.
• Engage AbbVie Third Party Vendors to assess security posture, remediationrequirements,and compensating controls as they apply to BusinessApplications.
• Develop in-depth knowledge of AbbVie Information Security policies,processes,and procedures, as well as compliance processes andinitiativestoprovide subject matterexpertiseand guidance to other organizations (Commercial, R&D, Audit, Legal,Purchasing, etc.) within AbbVie in these matters.
• Provide Information Securityexpertiseand guidance to Business group leaders and IT Owners to ensurean appropriate balancebetween security risks and business enablement foridentifiedbusiness programs and initiatives.
• Provide reporting to management on potential Data Privacy risks and planned remediation.
• Act as point of contactregardingInformation Security matters and AbbVie security policies for AbbVie Purchasing, Legal/Privacy and Quality.
• Review current technology and information policies and practices for continued applicability with respect to AbbVie commercial and R&D business programs. Provide recommendations for improvements.

Qualifications

Required:

• Bachelor’sDegree with 5years of experience; OR Master's Degreewith 4years of experiencein Information Security, Data Privacy, or IT Compliance experience.
• Familiarity with, and experience using, a variety of information security control frameworks, including, but not limited to: NIST Cybersecurity Framework, ISO 2700X, PCI-DSS, SWIFT, Cloud Controls Matrix, HITRUST, NIST 800-171, CIS Controls, etc.
• Familiarity with global and regional Data Privacy regulations such as GDPR, HIPAA, and CCPA.
• Experience aligning and testing information security controls and frameworks.
• Experience writing policies and procedures.
• Experience working in information security or data privacy in a large, global organization.
• Strong project management, collaboration,communication,and organizational skills.
• Adept at communicating concepts to diverse audiences with varying skill sets.
• Strong written and verbal communication skills are critical.

Preferred:

• Certified Information Security Manager (CISM), Certified Information Privacy Technologist (CIPT), or other equivalent certifications preferred.

Additional Information

Applicable only to applicants applying to a position in any location with pay disclosure requirements under state orlocal law:

• The compensation range described below is the range of possible base pay compensation that the Companybelieves ingood faith it will pay for this role at thetimeofthis posting based on the job grade for this position.Individualcompensation paid within this range will depend on many factors including geographiclocation,andwemayultimatelypaymore or less than the posted range. This range may bemodifiedin thefuture.
• We offer a comprehensive package of benefits including paid time off (vacation, holidays, sick),medical/dental/visioninsurance and 401(k) to eligibleemployees.
• This job is eligible toparticipatein our short-term incentiveprograms.

Note: No amount of payis considered to bewages or compensation until such amount is earned, vested, anddeterminable.Theamountandavailabilityof anybonus,commission, incentive, benefits, or any other form ofcompensation and benefitsthat are allocable to a particular employeeremainsin the Company'ssoleandabsolutediscretion unless and until paid andmay bemodifiedat the Company’s sole and absolute discretion, consistent withapplicable law.

AbbVie is an equal opportunity employer and is committed to operating with integrity, driving innovation, transforming lives and serving our community. Equal Opportunity Employer/Veterans/Disabled.

US & Puerto Rico only - to learn more, visit https://www.abbvie.com/join-us/equal-employment-opportunity-employer.html

US & Puerto Rico applicants seeking a reasonable accommodation, click here to learn more:

https://www.abbvie.com/join-us/reasonable-accommodations.html