SOX Risk Architect and Compliance Lead

AbbVie; North Chicago (IL); On-site; USD 110,000 - 209,000; Full time

Job summary

AbbVie seeks an experienced SOX Risk Architect & Compliance Lead to mature IT risk governance, control design, and compliance programs. You will coordinate across audit, IT, security, and business teams to implement SBX controls and policy frameworks.

You will drive automation for evidence delivery, monitor regulatory compliance, and help shape AbbVie's risk strategy in a dynamic, global environment.

Qualifications

• Bachelor's/Master/PhD with IT compliance/audit experience
• Strong SOX regulatory knowledge and risk management
• Experience with governance, risk and compliance frameworks

Responsibilities

• Establish and oversee formal risk analysis and risk-assessment programs for IT systems and processes, focusing on SOX controls
• Drive technology enablement to automate SOX audit evidence delivery
• Ensure and monitor compliance with SOX and other regulations
• Liaise with Internal Audit, External Auditors and IT teams to remediate issues and track compliance-related items
• Participate in creation and maintenance of AbbVie’s risk, security & compliance policies
• Maintain expertise on governance, risk, security & compliance trends to mitigate exposures
• Ensure adherence to applicable corporate and divisional policies and procedures
• Review and input to improve IT policies and procedures

Skills

SOX compliance

Risk assessment

Regulatory knowledge

Leadership experience

Education

Bachelor's Degree in IT/CS/CE

Master's Degree with 6 yrs exp

PhD with 2 yrs exp

Tools

COBIT

ISO 27001

ITIL

Risk IT

Job description

• Compensation: USD 109500 - USD 208500 - yearly

Company Description

About AbbVie

AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas including immunology, oncology, and neuroscience - and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us atwww.abbvie.com . Follow @abbvie onLinkedIn, Facebook ,Instagram ,X andYouTube.

Job Description

TheSarbanes Oxley (SOX)RiskArchitect& Compliance Lead role is accountable for facilitation of IT risk management processes.Collaborates cross-functionally to help mature and execute the IT Risk Security and Compliance processes which include governance, risk assessment, risk analysis, risk metrics, risk reporting, supplier monitoring, internal / external auditsupport,and technology enablement. Provides leadership for the creation of aSOXCompliance Strategy, project execution and improvement initiatives for IT. Creates strategies and processes related to all areas of Governance, Risk Management and Compliance.Maycoordinates the efforts of several groups to ensure compliance with other federal and industry regulations andrequirements.

Responsibilities:

• Establish and oversee formal risk analysis and risk-assessment programs for various Information Services systems and processes, focusing on SOX-related controls.
• Drive technologyenablementto automate the delivery of SOX audit evidence.
• Ensure andmonitorcompliance with SOXas well as other federal and industry regulations and requirements.
• Liaise with Internal Audit,Internal Controls,external Auditors and BTS application teams/control ownersto remediate new and outstanding issues; trackcompliance-related issues.
• Participate in the overall creation and maintenance of AbbVie’s risk, security & compliance policies, standards,guidelines,and baselines.
• Maintainexpertiseon governance, risk,security& compliancetrends through training,research,and developmentin order tomitigate potential security exposures.
• Responsible for compliance with applicable Corporate and Divisional Policies and procedures
• Ensure that all applicable AbbVie IT policies and procedures are followed. Reviews andprovideinput to improve procedures as applicable.

Qualifications

Required:

• Bachelor's Degreein Information Technology, Computer Science or Computer Engineering with 7 years’ experience; Or Master's Degree with 6 years’ experience; Or PhD with 2 years of experience with IT compliance, IT risk, and/or IT audit.
• In-depth understanding with all aspects of regulatory and contractual compliance, especiallySarbanes Oxley (SOX).
• Advanced knowledge of risk assessment design and delivery.
• Experience communicating and presenting both verbally and in writing to various audiences, including committees, large groups, senior management, and executive leadership.
• Experience with IT processes, risk, and control frameworks, such as COBIT, ISO 27001, ITIL, Risk IT.
• Requires knowledge of outsourcing methodologies and operating models and working with professional services firms.
• Requires experience overseeing geographically distributed and culturally diverse workgroups.

Preferred:

• Experience with Software Development Lifecycle (SDLC) methodologies preferred.
• Professional security management certification: CISSP or CISA preferred.

Additional Information

Applicable only to applicants applying to a position in any location with pay disclosure requirements under state orlocal law:

• The compensation range described below is the range of possible base pay compensation that the Companybelieves ingood faith it will pay for this role at the timeof this posting based on the job grade for this position.Individualcompensation paid within this range will depend on many factors including geographic location, andwemayultimatelypaymore or less than the posted range. This range may bemodifiedin thefuture.
• We offer a comprehensive package of benefits including paid time off (vacation, holidays, sick),medical/dental/visioninsurance and 401(k) to eligibleemployees.
• This job is eligible toparticipatein our long-term incentiveprograms.

Note: No amount of payis considered to bewages or compensation until such amount is earned, vested, anddeterminable.The amount and availability of any bonus,commission, incentive, benefits, or any other form ofcompensation and benefitsthat are allocable to a particular employeeremainsin the Company's sole andabsolutediscretion unless and until paid andmay bemodifiedat the Company’s sole and absolute discretion, consistent withapplicable law.

AbbVie is an equal opportunity employer and is committed to operating with integrity, driving innovation, transforming lives and serving our community. Equal Opportunity Employer/Veterans/Disabled.