Risk, Security, and Compliance Analyst
About AbbVie
AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas including immunology, oncology and neuroscience — and products and services in our Allergan Aesthetics portfolio.
About the Role
The Risk, Security, and Compliance Analyst is an individual contributor responsible for supporting the security, compliance, and risk posture of business applications within the R&D IR portfolio. The role partners cross-functionally with risk, security, compliance, and business and IT stakeholders to facilitate initiatives that reduce risk, strengthen control effectiveness, and enable successful delivery of related projects.
Key outputs include maintaining accurate program data, monitoring performance against objectives, supporting risk reduction activities, and contributing to the identification, development, and implementation of system enhancements that improve security, compliance, and operational effectiveness across the portfolio.
Responsibilities
- Ensure compliance with applicable corporate, organizational, and regulatory policies and procedures.
- Build and maintain relationships across BTS and business functions.
- Work with compliance leads to facilitate accurate interpretation of system compliance requirements within assigned project areas and supports teams in executing required compliance activities in accordance with applicable policies and procedures.
- Support the security, risk, and compliance posture of business applications within the R&D IR portfolio by coordinating activities that align with enterprise standards, regulatory expectations, and internal control requirements.
- Partner with business, IT, security, risk, compliance, and application stakeholders to communicate project needs, clarify requirements, and support delivery of risk reduction and compliance-related initiatives.
- Support execution of control, compliance, and risk management processes, including evidence collection, control monitoring, access or recertification support, and remediation tracking as applicable.
- Understand and clearly communicate defined objectives, milestones, remediation plans, risks, issues, gaps, or delays and communicate status to appropriate stakeholders.
- Contribute to the preparation of clear status updates, metrics, dashboards, and reports that communicate progress, risks, decisions, and outcomes to management and stakeholders.
- Promote a culture of compliance, accountability, and continuous improvement by applying sound judgment, attention to detail, and effective collaboration across the organization.
Qualifications
- Bachelor's Degree in Information Systems or related field and 2 years’ experience; or Master's degree with 0 years' experience.
- Experience in the systems development, implementation, and operations of a large-scale enterprise system.
- Experience with SmartSheet, Microsoft Office Suite and SharePoint.
- Basic understanding of security controls, risk management and compliance requirements.
- Excellent interpersonal skills and well-developed verbal and written communication skills.
- Must be able to effectively lead and facilitate meetings with customers and technical team members.
- Must be deliverables focused and detail oriented.
- Must exhibit exceptional teamwork skills.
- Must have a strong customer focus.
Benefits
- Comprehensive package of benefits including paid time off (vacation, holidays, sick).
- Medical, dental, and vision insurance.
- 401(k) eligibility.
- Eligibility to participate in short-term incentive programs.