Data Protection Specialist
About The Position
The Data Protection Specialist works with internal and external groups to help ensure AbbVie’s information security policies, practices, and procedures are properly implemented. The role supports the Data Protection Office in strengthening data security controls and improving operational processes. It involves working with people across organizational units to help those responsible for implementing, monitoring, and enforcing policy understand its requirements. Designed for someone with an engineering, computer science, software development, or related technical background who is interested in the business, governance, and assurance aspects of data security, the role drives control auditing, assurance activities, governance, development, security logging, automation, and responsible use of artificial intelligence to improve data protection processes.
Requirements
- Bachelor’s degree with 5 years of experience, or a master’s degree with 4 years of experience, in Information Security, Data Privacy, or IT Compliance.
- Familiarity with and experience using information security control frameworks, including examples such as NIST Cybersecurity Framework, ISO 2700X, PCI-DSS, SWIFT, Cloud Controls Matrix, HITRUST, NIST 800-171, and CIS Controls.
- Familiarity with global and regional data privacy regulations such as GDPR, HIPAA, and CCPA.
- Experience aligning and testing information security controls and frameworks.
- Experience writing policies and procedures.
- Experience working in information security or data privacy in a large, global organization.
- Strong project management, collaboration, communication, and organizational skills.
- Ability to communicate concepts to diverse audiences with varying skill sets.
- Strong written and verbal communication skills.
Nice To Haves
- Certified Information Security Manager (CISM), Certified Information Privacy Technologist (CIPT), or other equivalent certification.
Responsibilities
- Build and maintain relationships with IT and business group leaders to understand their goals, programs, and plans.
- Evaluate and communicate program security requirements, identify potential security risks, and assess business impact.
- Assess controls to verify that data protection controls are in place.
- Use AI to analyze data across file labeling, application logs, and infrastructure datasets to automate control assurance.
- Engage third-party vendors to assess security posture, remediation requirements, and compensating controls for business applications.
- Develop expertise in AbbVie information security policies, processes, procedures, and compliance initiatives, and provide guidance to other organizations within AbbVie.
- Advise business group leaders and IT owners on balancing security risks with business enablement for programs and initiatives.
- Report potential data privacy risks and planned remediation to management.
- Serve as a point of contact on information security matters and AbbVie security policies for Purchasing, Legal/Privacy, and Quality.
- Review technology and information policies and practices for continued applicability to commercial and R&D programs, and recommend improvements.
Benefits
- Paid time off, including vacation, holidays, and sick time.
- Medical, dental, and vision insurance.
- 401(k).
- Eligibility to participate in short-term incentive programs.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
