Associate Director - Cybersecurity Posture, Hygiene and AI
About The Position
AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas including immunology, oncology and neuroscience - and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us at www.abbvie.com. Follow @abbvie on LinkedIn, Facebook, Instagram, X and YouTube. Our Business Technology Solutions (BTS) team shapes the digital transformation accelerating the future of medicine at AbbVie, and we do it together, asking bold questions and tackling complex challenges through deep, honest collaboration. In the role of Associate Director, Cybersecurity Posture, Hygiene and AI, you will join a diverse, global organization that invests in your growth while empowering you to lead teams that secure the technologies improving patients’ lives. This role builds and leads an enterprise security posture and hygiene program with a specific emphasis on configuration drift technologies and services. You are a people manager, accountable for setting direction, developing talent, and delivering sustained program outcomes. You will define the strategy, operating model, metrics, and governance needed to continuously improve control effectiveness across on‑premise and cloud environments and ensure AI-enabled workflows operate within enterprise security, privacy, and data protection expectations by detecting misuse, configuration drift, and control gaps. You will join the Business Technology Solutions (BTS) Information Security and Risk Management (ISRM) organization. Our team focuses on reducing systemic risk by strengthening baseline security controls, improving configuration hygiene, and building scalable programs that enable safe adoption of modern and AI-enabled technologies across the enterprise.
Requirements
- Bachelors Degree and 9 years of experience OR Masters Degree and 8 years of experience OR PhD and 4 years of experience
- Proven leadership in cybersecurity, with extensive experience in managing security posture and hygiene strategies within complex and diverse IT environments
- Experience implementing an AI security program across an enterprise.
- Expert knowledge of operating systems, networking protocols, systems administration, X as a service, applications, and security technologies.
- Expert knowledge and application of cybersecurity terminology, concepts, and the cyber threat landscape and attack vectors.
- Deep understanding of risk management principles and the ability to integrate these into security practices.
- Demonstrated ability to innovate and adapt in response to a constantly changing environment.
- Advanced critical thinking, problem solving, and analytical skills
- Strong leadership and collaboration skills with business and technical groups.
- Excellent written and verbal communication and listening skills, with the ability to effectively convey technical insights to technical and non-technical stakeholders.
- Demonstrated ability to interface effectively with clients, IT management, and staff.
- A sincere desire to learn, grow, and go beyond personal capabilities, staying abreast of the latest developments in the cybersecurity landscape .
Nice To Haves
- Professional cybersecurity certifications (e.g., CISSP, CISM, CIS Controls, etc.) are highly desirable.
Responsibilities
- Building and leading a security posture and hygiene program, including strategy, roadmap, operating cadence, governance, and direct people management.
- Managing and developing a multidisciplinary team responsible for control assessments, configuration hygiene, remediation planning, and continuous improvement, including hiring, coaching, performance management, and career development.
- Leveraging AI as an accelerator and enabler to drive speed and efficiency in continuous control monitoring and response
- Integrating posture and hygiene telemetry from AI-enabled tools, custom tools and workflows to detect misuse, configuration drift, and critical control deviations
- Identifying patterns of intentional and unintentional misuse of AI-enabled tools and workflows and translating those findings into preventive, systemic control improvements.
- Developing and maturing a control framework aligned to the Center for Internet Security (CIS) Top 18 Controls and associated safeguards, tailoring implementation guidance to AbbVie environments.
- Establishing a consistent methodology to assess control maturity, identify systemic gaps, and prioritize remediation based on risk and business impact.
- Partnering with infrastructure, cloud, identity, network, endpoint, application, and AI engineering teams to embed secure-by-default configurations and resilient architectures.
- Building metrics, dashboards, and executive-ready reporting that provide actionable insight into posture trends, control effectiveness, and remediation progress.
- Driving enablement by publishing standards, playbooks, and guidance that helps teams design, deploy, and operate securely.
- Continuously evolving the program by staying current on emerging risks related to AI, automation, and modern attack techniques.
Benefits
- paid time off (vacation, holidays, sick)
- medical/dental/vision insurance
- 401(k)
- short-term incentive programs
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Director
