Associate Director - Security Posture and Hygiene (Remote)

AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas immunology, oncology, neuroscience, and eye care and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us atwww.abbvie.com. Follow @abbvie onTwitter,Facebook,Instagram,YouTubeandLinkedIn.

Come to work each day with an inclusive and collaborative business technology team. As an Associate Director, Security Posture and Hygiene in AbbVie Business Technology Solutions (BTS), youll have opportunities to contribute to the digital transformation of a leading biopharma company,helping to create solutions that impact patients and their communities for the better

This position can be based anywhere remotely/virtually anywhere in the U.S.

The Associate Director, Security Posture and Hygiene, plays a pivotal leadership role within our organization, steering the strategic direction, design, and implementation of our security posture and hygiene program. This role is at the forefront of enhancing our cybersecurity measures across a diverse and complex infrastructure landscape, including on-premise and cloud models. By continuously monitoring and remediating security control gaps and leveraging the Center for Internet Security (CIS) Top 18 critical security controls, this position aims to bolster our defenses by improving our hygiene of cybersecurity standards and practices.

In this role, you will be responsible for:

• Develop a comprehensive strategy for the security posture and hygiene program.


• Assemble and manage a team dedicated to implementing, assessing, and maturing the CIS Top 18 critical controls and their associated safeguards.


• Develop and execute strategies for continuous monitoring and improvement of security controls and configurations across enterprise systems.


• Ensure the hygiene of security configurations by establishing and enforcing policies, procedures, and standards to prevent unauthorized access, data breaches, and other cyber threats.


• Collaborate with IT, network, and other relevant departments to align security measures with organizational goals and compliance requirements.


• Develop and maintain comprehensive documentation on security controls, assessments, incidents, and improvements.


• Conduct regular assessments to determine the maturity of each security control, identifying areas for improvement and recommending enhancements.


• Foster strong partnerships with technology and domain stakeholders to ensure seamless integration and compliance of security practices across the enterprise.


• Stay abreast of the latest cybersecurity trends, threats, and technologies to adapt and evolve our security strategies accordingly.


• Lead initiatives to educate and train team members and the wider organization on cybersecurity good practices and the importance of a forward-thinking security posture.


• Ensure that all security programs and initiatives adhere to relevant laws, regulations, and policies, continuously updating practices to meet new standards.


• Oversee daily operations, including targeted assessments, risk management, and response strategies, ensuring a high level of security and resilience against cyber threats.


• Build collaborative relationships and partner effectively with business and technology senior leaders.


• Maintain expert-level professional and technical knowledge in relevant domains


• Building metrics and dashboards that will provide stakeholders with actionable insights into the security posture of technologies

• Bachelors Degree and 9 years of experience OR Masters Degree and 8 years of experience OR PhD and 4 years of experience


• Proven leadership in cybersecurity, with extensive experience in managing security posture and hygiene strategies within complex and diverse IT environments


• Expert knowledge of operating systems, networking protocols, systems administration, X as a service, applications, and security technologies.


• Expert knowledge and application of cybersecurity terminology, concepts, and the cyber threat landscape and attack vectors.


• Deep understanding of risk management principles and the ability to integrate these into security practices.


• Experience with the CIS Top 18 controls and familiarity with the CIS Controls Implementation Groups (IGs) methodology.


• Demonstrated ability to innovate and adapt in response to a constantly changing environment.


• Advanced critical thinking, problem solving, and analytical skills


• Strong leadership and collaboration skills with business and technical groups.


• Excellent written and verbal communication and listening skills, with the ability to effectively convey technical insights to technical and non-technical stakeholders.


• Demonstrated ability to interface effectively with clients, IT management, and staff.


• A sincere desire to learn, grow, and go beyond personal capabilities, staying abreast of the latest developments in the cybersecurity landscape .


• Professional cybersecurity certifications (e.g., CISSP, CISM, CIS Controls, etc.) are highly desirable.

Why Business Technology Solutions

For anyone who wants to use technology and data to make a difference in peoples lives, shape the digital transformation of a leadingbiopharmaceutical company, and secure sustainable career growth within a diverse, global team: were ready for you.

Applicable only to applicants applying to a position in any location with pay disclosure requirements under state orlocal law:

• The compensation range described below is the range of possible base pay compensation that the Companybelieves ingood faith it will pay for this role at the timeof this posting based on the job grade for this position.Individualcompensation paid within this range will depend on many factors including geographic location, andwemay ultimatelypay more or less than the posted range. This range may be modified in thefuture.

• We offer a comprehensive package of benefits including paid time off (vacation, holidays, sick),medical/dental/visioninsurance and 401(k) to eligibleemployees.

• This job is eligible to participate in our short-term incentiveprograms.

• This job is eligible to participate in our long-term incentiveprograms

Note: No amount of payis considered to bewages or compensation until such amount is earned, vested, anddeterminable.The amount and availability of any bonus,commission, incentive, benefits, or any other form ofcompensation and benefitsthat are allocable to a particular employee remains in the Company's sole andabsolutediscretion unless and until paid andmay be modified at the Companys sole and absolute discretion, consistent withapplicable law.

AbbVie is an equal opportunity employer and is committed to operating with integrity, driving innovation, transforming lives, serving our community and embracing diversity and inclusion. It is AbbVies policy to employ qualified persons of the greatest ability without discrimination against any employee or applicant for employment because of race, color, religion, national origin, age, sex (including pregnancy), physical or mental disability, medical condition, genetic information, gender identity or expression, sexual orientation, marital status, status as a protected veteran, or any other legally protected group status.

US & Puerto Rico only - to learn more, visithttps://www.abbvie.com/join-us/equal-employment-opportunity-employer.html

US & Puerto Rico applicants seeking a reasonable accommodation, click here to learn more:

https://www.abbvie.com/join-us/reasonable-accommodations.html