Senior IT Compliance Analyst - Mettawa, United States - AbbVie

Description

Job Description

AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas – immunology, oncology, neuroscience, and eye care – and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us at Follow @abbvie on Twitter, Facebook, Instagram, YouTube and LinkedIn.

Take the next step in your career with an organization that strategically invests in the long-term health of the company, its technology, and its people. The AbbVie Business Technology Solutions (BTS) team shapes the digital transformation necessary for our treatments to positively impact patients' lives. In the role of the BTS Senior IT Compliance Analyst, you'll tackle complex challenges as you develop and diversify your professional experiences while helping others grow and develop their skills.

This role is expected to provide support and direction on BTS Compliance policies, processes, and procedures; to identify, propose, initiate, and lead global/area/affiliate improvement programs related to BTS Compliance policy, processes, and procedures; and to ensure, through proactive participation, guidance, and follow-up, BTS Compliance activities across multiple projects.

In this role, you'll be responsible for:

• Understanding the SLC requirements (Regulatory Characterization, Quick Hits, Personal Data Assessment, Data Classification etc.) and the preparation and execution of compliance activities for new or revised applications/systems at the functional business unit level.
• Managing the SLC Monitoring Program for Allergan Aesthetics Team.
• Identifying current and emerging needs and evaluating alternatives and appropriate processes and workflows.
• Providing guidance to staff during review and approval of BTS Compliance system documentation.
• Coordinating portfolio of solutions offered and identifying interdependencies.
• Assisting in managing GRC risks remediation.
• Facilitating the non-conformance / exception reporting / CAPA processes, if any.
• Working with Third Parties (if required) to gather and review supporting documentation to close out BTS non-compliance gaps.
• Coordinating BTS Training Assignments as required per global programs (AMM etc.).
• Developing business relationships and integrating activities with internal and external BTS and QA departments to ensure successful implementation and support of project efforts, by ensuring consistent BTS Compliance practices.
• Co-managing the accuracy and updates of compliance operational metrics.
• Identifying information required to support business processes and collaborating in the development of appropriate strategies.
• Actively participating in audit preparedness for the affiliates including pre-audit reviews, audit support, and post audit closeout/follow-up.
• Conducting training and identifying process disconnects and translating them into improvement opportunities.
• Developing business relationships and integrating activities with other BTO's to ensure successful implementation and support of project efforts.
• Significantly contributing to business process improvement and overall knowledge of the organization.

Experiences that make you a strong candidate for this role:

Required

• Bachelor's Degree with 6 years' experience; Master's Degree with 5 years' experience; PhD with 0 years' experience.
• 5+ years of IT Audit, IT Compliance, Information Security, or IT Risk Management experience or equivalent experience in Information Risk Management.
• Familiarity with, and experience using, a variety of information security control frameworks, including, but not limited to: NIST Cybersecurity Framework, ISO 2700X, PCI-DSS, CoBIT, Cloud Controls Matrix, HITRUST, NIST , CIS Controls, etc.
• Strong knowledge of the SLC process.
• Strong project management, collaboration, and organizational skills.
• Strong written and verbal communication skills are critical.

Preferred

• Experience working in IT Audit or IT Compliance or Information Security in a large, global organization.
• Familiarity with global and regional Data Privacy, such as GDPR, HIPAA, and CCPA.
• Familiarity in the use of SmartSheet and TrackWise.
• Certified Information Systems Security Professional (CISSP) or other equivalent certifications.
• Adept at communicating concepts to diverse audiences with varying skill sets.

Open to remote anywhere in the United States.

Why Business Technology Solutions

For anyone who wants to use technology and data to make a difference in people's lives, shape the digital transformation of a leading biopharmaceutical company, and secure sustainable career growth within a diverse, global team: we're ready for you.

Applicable only to applicants applying to a position in any location with pay disclosure requirements under state or local law: ​

​

• The compensation range described below is the range of possible base pay compensation that the Company believes in good faith it will pay for this role at the time of this posting based on the job grade for this position. Individual compensation paid within this range will depend on many factors including geographic location, and we may ultimately pay more or less than the posted range. This range may be modified in the future.​
• We offer a comprehensive package of benefits including paid time off (vacation, holidays, sick), medical/dental/vision insurance and 401(k) to eligible employees.​
• This job is eligible to participate in our short-term incentive programs. ​

​

Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, incentive, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole and absolute discretion unless and until paid and may be modified at the Company's sole and absolute discretion, consistent with applicable law. ​

AbbVie is committed to operating with integrity, driving innovation, transforming lives, serving our community and embracing diversity and inclusion. It is AbbVie's policy to employ qualified persons of the greatest ability without discrimination against any employee or applicant for employment because of race, color, religion, national origin, age, sex (including pregnancy), physical or mental disability, medical condition, genetic information, gender identity or expression, sexual orientation, marital status, status as a protected veteran, or any other legally protected group status.