SOX Risk Architect and Compliance Lead

BioSpace; North Chicago (IL); On-site; USD 140,000 - 200,000; Full time

Benefits offered by this job

Benefits package

401(k)

Long-term incentives

Job summary

AbbVie is seeking a SOX Risk Architect & Compliance Lead to drive IT risk management, governance and compliance programs across the enterprise. You will partner with internal audit, controls owners and BTS teams to implement SOX controls, automate evidence collection, and ensure regulatory alignment.

The role demands strong risk assessment design and mastery of COBIT, ISO 27001, and ITIL frameworks. The position requires exceptional communication with senior leadership and a proven track record

Qualifications

• Bachelor's degree in Information Technology, Computer Science or Computer Engineering with 7 years experience; Or Master's 6 years; Or PhD with 2 years in IT compliance, IT risk, and/or IT audit.
• In-depth understanding of regulatory and contractual compliance, especially SOX.
• Advanced knowledge of risk assessment design and delivery.
• Experience communicating to committees, senior management and executives.
• Experience with IT processes, risk, and control frameworks (COBIT, ISO 27001, ITIL, Risk IT).
• Requires knowledge of outsourcing methodologies and working with professional services firms.
• Experience overseeing geographically distributed and culturally diverse workgroups.

Responsibilities

• Establish and oversee formal risk analysis and risk-assessment programs for IT systems and processes focusing on SOX controls.
• Drive technology enablement to automate SOX audit evidence delivery.
• Ensure and monitor compliance with SOX and other regulations.
• Liaise with Internal Audit, controls, internal/external auditors and BTS teams to remediate issues; track compliance-related issues.
• Participate in creating and maintaining AbbVie's risk, security & compliance policies and baselines.
• Maintain expertise on governance, risk, security & compliance trends to mitigate exposures.
• Responsible for compliance with applicable corporate and divisional policies.
• Review and provide input to improve procedures.

Skills

SOX compliance

IT risk management

Governance & controls

Risk assessment design

Regulatory awareness

Communication skills

Frameworks (COBIT, ISO 27001, ITIL, RM

Education

Bachelor's Degree in IT/CS/Engineering

Master's Degree

PhD (with IT compliance/audit)

Tools

COBIT

ISO 27001

ITIL

Risk IT

Job description

About AbbVie

AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas including immunology, oncology, and neuroscience - and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us atwww.abbvie.com. Follow @abbvie onLinkedIn,Facebook,Instagram,XandYouTube.

Company Description

AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas including immunology, oncology, and neuroscience - and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us atwww.abbvie.com. Follow @abbvie onLinkedIn,Facebook,Instagram,XandYouTube.

Job Description

The Sarbanes Oxley (SOX) Risk Architect & Compliance Lead role is accountable for facilitation of IT risk management processes. Collaborates cross-functionally to help mature and execute the IT Risk Security and Compliance processes which include governance, risk assessment, risk analysis, risk metrics, risk reporting, supplier monitoring, internal / external audit support, and technology enablement. Provides leadership for the creation of a SOX Compliance Strategy, project execution and improvement initiatives for IT. Creates strategies and processes related to all areas of Governance, Risk Management and Compliance. May coordinate the efforts of several groups to ensure compliance with other federal and industry regulations and requirements.

Responsibilities

• Establish and oversee formal risk analysis and risk-assessment programs for various Information Services systems and processes, focusing on SOX-related controls.
• Drive technology enablement to automate the delivery of SOX audit evidence.
• Ensure and monitor compliance with SOX as well as other federal and industry regulations and requirements.
• Liaise with Internal Audit, Internal Controls, external Auditors and BTS application teams/control owners to remediate new and outstanding issues; track compliance-related issues.
• Participate in the overall creation and maintenance of AbbVie's risk, security & compliance policies, standards, guidelines, and baselines.
• Maintain expertise on governance, risk, security & compliance trends through training, research, and development in order to mitigate potential security exposures.
• Responsible for compliance with applicable Corporate and Divisional Policies and procedures.
• Ensure that all applicable AbbVie IT policies and procedures are followed. Reviews and provide input to improve procedures as applicable.

Qualifications

Required:

• Bachelor's Degree in Information Technology, Computer Science or Computer Engineering with 7 years experience; Or Master's Degree with 6 years experience; Or PhD with 2 years of experience with IT compliance, IT risk, and/or IT audit.
• In-depth understanding with all aspects of regulatory and contractual compliance, especially Sarbanes Oxley (SOX).
• Advanced knowledge of risk assessment design and delivery.
• Experience communicating and presenting both verbally and in writing to various audiences, including committees, large groups, senior management, and executive leadership.
• Experience with IT processes, risk, and control frameworks, such as COBIT, ISO 27001, ITIL, Risk IT.
• Requires knowledge of outsourcing methodologies and operating models and working with professional services firms.
• Requires experience overseeing geographically distributed and culturally diverse workgroups.

Preferred

• Experience with Software Development Lifecycle (SDLC) methodologies preferred.
• Professional security management certification: CISSP or CISA preferred.

Additional Information

• The compensation range described below is the range of possible base pay compensation that the Company believes in good faith it will pay for this role at the time of this posting based on the job grade for this position. Individual compensation paid within this range will depend on many factors including geographic location, and we may ultimately pay more or less than the posted range. This range may be modified in the future.
• We offer a comprehensive package of benefits including paid time off (vacation, holidays, sick), medical/dental/vision insurance and 401(k) to eligible employees.
• This job is eligible to participate in our long-term incentive programs.

Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, incentive, benefits, or any other form of compensation and benefits that are allocable to a particular employer remains in the Company's sole and absolute discretion unless and until paid and may be modified at the Companys sole and absolute discretion, consistent with applicable law.

AbbVie is an equal opportunity employer and is committed to operating with integrity, driving innovation, transforming lives and serving our community. Equal Opportunity Employer/Veterans/Disabled.

US & Puerto Rico only - to learn more, visit https://www.abbvie.com/join-us/equal-employment-opportunity-employer.html

US & Puerto Rico applicants seeking a reasonable accommodation, click here to learn more:

https://www.abbvie.com/join-us/reasonable-accommodations.html