Director, Information Security Regulatory Assurance
AbbVie
Summary
The Director, Information Security Regulatory Assurance is responsible for establishing and leading a sustainable enterprise capability to demonstrate compliance with applicable cybersecurity regulatory, statutory, and industry assurance requirements. This role provides strategic leadership and operational oversight for the organization's cybersecurity regulatory assurance portfolio, including NIS2, CCPA, U.S. Department of Justice data security requirements, China MLPS, SWIFT, and PCI, as well as emerging requirements that create cybersecurity audit, assessment, certification, attestation, or evidence obligations.
Job description
The Director will translate regulatory requirements into practical assurance expectations, coordinate readiness and assessments across Information Security, technology teams, business organizations, affiliates, manufacturing sites, R&D locations, and provide leadership with clear visibility into readiness, risk, deficiencies, and remediation.
Responsibilities
- Work with domain senior leadership and make contributions to develop strategy; adapt and execute domain strategic plans (Information Security Regulatory Assurance Strategy & Governance)
- Manage and communicate the assurance calendar and priorities (Cyber Regulatory Portfolio Leadership)
- Control & Evidence Assurance / Continuous Monitoring and Issues, Risk & Remediation
- Build collaborative relationships and effectively interact frequently with business and/or technology senior leaders (Audit, Assessment & Attestation Management)
- Make key decisions guided by established strategies and priorities; influence operating policies and procedures based on changes in the regulatory environment (Regulatory Change & Emerging Requirements)
- Provide executive reporting and stakeholder management
- Drive opportunities to improve process and/or technology (Assurance Transformation & Continuous Improvement)
Qualifications
- Bachelor's Degree and 10 years of experience; Master's Degree and 9 years of experience; PhD and 5 years of experience
- Significant experience in cybersecurity governance, risk, compliance, audit, assurance, or regulatory programs
- Ability to communicate problems in terms understandable to BTS Leadership and end users at all levels
- Subject matter expert in technology and/or business domain
- Demonstrated experience leading complex, cross-functional assurance, regulatory or audit initiatives
- Strong knowledge of cybersecurity controls, control testing, evidence, remediation, and audit practices
- Ability to interpret regulatory requirements and translate them into operational control and assurance requirements
Preferred
- Master's Degree preferred
- Experience in the pharmaceutical industry preferred
- Experience with several of: NIS2, ISO/IEC 27001, NIST Cybersecurity Framework, NIST SP 800-53, CCPA cybersecurity requirements, China MLPS, SWIFT Customer Security Controls Framework, PCI DSS
- Relevant certifications may include CISA, CISM, CISSP, CRISC, ISO 27001 Lead Auditor/Lead Implementer or equivalent credentials
Requirements
- Bachelor's Degree and 10 years of experience; Master's Degree and 9 years of experience; PhD and 5 years of experience
- Significant experience in cybersecurity governance, risk, compliance, audit, assurance, or regulatory programs
- Ability to communicate problems in terms understandable to BTS Leadership and end users at all levels
- Subject matter expert in technology and/or business domain
- Demonstrated experience leading complex, cross-functional assurance, regulatory or audit initiatives
- Strong knowledge of cybersecurity controls, control testing, evidence, remediation, and audit practices
- Ability to interpret regulatory requirements and translate them into operational control and assurance requirements
Benefits
- Paid time off
- Medical, Dental & Vision
- 401(k)
- Long-term incentive programs
Company overview
AbbVie is a global biopharmaceutical company that discovers, develops, and markets advanced therapies for some of the world's most complex and serious diseases. Founded in 2013 as a spin-off from Abbott Laboratories, AbbVie has established itself as a leader in immunology, oncology, neuroscience, eye care, and virology. The company's flagship product, Humira (adalimumab), was one of the world's top-selling drugs for treating autoimmune conditions like rheumatoid arthritis and Crohn's disease. AbbVie maintains a robust pipeline of innovative medicines and has expanded its portfolio through strategic acquisitions, including Allergan in 2020. With research facilities across the United States and globally, AbbVie focuses on advancing science to improve patient outcomes while maintaining strong commercial operations worldwide. The company operates with a patient-centric approach and invests significantly in research and development to address unmet medical needs across multiple therapeutic areas.