Data Protection Specialist

AbbVie Inc.; North Chicago (IL); Presencial; USD 110.000 - 160.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Paid time off

Medical/dental/vision insurance

401(k) plan

Descripción de la vacante

AbbVie in North Chicago is seeking a Data Protection Specialist to strengthen security controls across IT and business groups. The role supports the Data Protection Office, driving auditing, governance, and automation with a focus on responsible AI usage.

You will partner with vendors, develop policies, and balance security risk with enabling business programs while communicating clearly to diverse audiences. This position offers on-site work and a comprehensive benefits package.

Formación

• Bachelor’s or Master’s in Information Security, Data Privacy, or IT Compliance with experience.
• Familiarity with security control frameworks including NIST CSF, ISO 2700X, PCI-DSS, SWIFT, Cloud Controls Matrix, HITRUST, NIST 800-171, CIS Controls.
• Familiarity with GDPR, HIPAA, and CCPA.
• Experience aligning and testing information security controls and frameworks.
• Experience writing policies and procedures.
• Experience in information security or data privacy in a large organization.
• Strong project management, collaboration, communication, and organizational skills.
• Adept at communicating concepts to diverse audiences.
• Strong written and verbal communication skills.

Responsabilidades

• Establish and maintain relationships with IT and business leaders to understand goals and security requirements.
• Conduct assessments of controls to ensure data protection measures are in place.
• Leverage AI to analyze data to automate control assurance.
• Engage third party vendors to assess security posture and remediation needs for business applications.
• Develop knowledge of AbbVie information security policies and provide guidance within AbbVie.
• Provide information security expertise to balance risk and business enablement.
• Provide management reporting on potential data privacy risks and remediation plans.
• Serve as point of contact for information security matters with Purchasing, Legal/Privacy and Quality.
• Review policies and practices and recommend improvements.

Conocimientos

Project management

Communication

Collaboration

Organizational skills

Written communication

Verbal communication

Educación

Bachelor's or Master's in Information Security/Privacy/IT Compliance

Herramientas

NIST Cybersecurity Framework

ISO 2700X

PCI-DSS

Cloud Controls Matrix

HITRUST

NIST 800-171

CIS Controls

GDPR

HIPAA

CCPA

Descripción del empleo

About AbbVie

AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas including immunology, oncology and neuroscience - and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us at www.abbvie.com . Follow @abbvie on LinkedIn, Facebook , Instagram , X and YouTube.

The Data Protection Specialist works with various internal and external groups to ensure that AbbVie information security policies, practices, and procedures are properly implemented within AbbVie. They support the Data Protection Office in strengthening company data security controls and maturing operational processes. The individual will interface with a wide variety of people from different internal organizational units, interface with organizational personnel and staff to ensure that the policy is understood by those required to implement, monitor, and enforce the policy. This role is designed for a professional with an engineering, computer science, software development, or related technical background who is interested in the business, governance, and assurance aspects of data security. Under the guidance of the Data Protection Office, the role will drive control auditing, assurance activities, governance, development, security logging, automation, and the responsible use of artificial intelligence to improve efficiency, consistency, and maturity of data protection processes.

Responsibilities

• Establish and maintain strong relationships with IT and Business group leaders to understand goals, programs, and plans. Evaluate and articulate program security requirements; identify potential security risk factors and business impact.
• Conduct assessments of controls to ensure data protection controls are in place.
• Leverage AI to analyze volumes of data across File Labeling, Application logs, and infrastructure datasets to automate control assurance.
• Engage AbbVie Third Party Vendors to assess security posture, remediation requirements, and compensating controls as they apply to Business Applications.
• Develop in-depth knowledge of AbbVie Information Security policies, processes, and procedures, as well as compliance processes and initiatives to provide subject matter expertise and guidance to other organizations (Commercial, R&D, Audit, Legal, Purchasing, etc.) within AbbVie in these matters.
• Provide Information Security expertise and guidance to Business group leaders and IT Owners to ensure an appropriate balance between security risks and business enablement for identified business programs and initiatives.
• Provide reporting to management on potential Data Privacy risks and planned remediation.
• Act as point of contact regarding Information Security matters and AbbVie security policies for AbbVie Purchasing, Legal/Privacy and Quality.
• Review current technology and information policies and practices for continued applicability with respect to AbbVie commercial and R&D business programs. Provide recommendations for improvements.

Required

• Bachelor’s Degree with 5 years of experience; OR Master’s Degree with 4 years of experience in Information Security, Data Privacy, or IT Compliance experience.
• Familiarity with, and experience using, a variety of information security control frameworks, including, but not limited to: NIST Cybersecurity Framework, ISO 2700X, PCI-DSS, SWIFT, Cloud Controls Matrix, HITRUST, NIST 800-171, CIS Controls, etc.
• Familiarity with global and regional Data Privacy regulations such as GDPR, HIPAA, and CCPA.
• Experience aligning and testing information security controls and frameworks.
• Experience writing policies and procedures.
• Experience working in information security or data privacy in a large, global organization.
• Strong project management, collaboration, communication, and organizational skills.
• Adept at communicating concepts to diverse audiences with varying skill sets.
• Strong written and verbal communication skills are critical.

Preferred

• Certified Information Security Manager (CISM), Certified Information Privacy Technologist (CIPT), or other equivalent certifications preferred.

Applicable only to applicants applying to a position in any location with pay disclosure requirements under state or local law:

The compensation range described below is the range of possible base pay compensation that the Company believes in good faith it will pay for this role at the time of this posting based on the job grade for this position. Individual compensation paid within this range will depend on many factors including geographic location, and we may ultimately pay more or less than the posted range. This range may be modified in the future.

We offer a comprehensive package of benefits including paid time off (vacation, holidays, sick), medical/dental/vision insurance and 401(k) to eligible employees.

This job is eligible to participate in our short-term incentive programs.

Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, incentive, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole and absolute discretion unless and until paid and may be modified at the Company’s sole and absolute discretion, consistent with applicable law.

AbbVie is an equal opportunity employer and is committed to operating with integrity, driving innovation, transforming lives and serving our community. Equal Opportunity Employer/Veterans/Disabled.

US & Puerto Rico only - to learn more, visit https://www.abbvie.com/join-us/equal-employment-opportunity-employer.html

US & Puerto Rico applicants seeking a reasonable accommodation, click here to learn more: https://www.abbvie.com/join-us/reasonable-accommodations.html