Careers

98 jobs found in decatur

Refine Search
Information Security Compliance & Policy Specialist (Decatur)
AbbVie Decatur, IL, USA
Jan 27, 2020
The Information Security Compliance and Policy Specialist works in support of policy compliance and data security requirements for the organization. The individual will interface with a wide variety of people from different internal organizational units, interface with organizational personnel and staff to interpret how AbbVie security policies can best be implemented in various situations and organizational elements; ensuring that the policy is understood by those required to implement, monitor, and enforce the policy. A focus area for this role will be Data Privacy compliance, with a view of enabling Privacy by Design in AbbVie's Software Life Cycle process. Responsibilities: Focus on IT data security policies, processes and procedures, compliance processes and initiatives, collaborating with other organizations within the company in these matters. Align AbbVie IT Controls to external frameworks as required. Recommend changes to controls, policies, and procedures as needed to align to external frameworks or regulatory changes. Provide reporting to management and Global Privacy on potential Data Privacy risks and planned remediation Lead and facilitate the BTS Privacy Community of Practice (CoP) across AbbVie to share best practices, develop common AbbVie tools, training, and KPIs Resolve IT compliance issues related to Privacy that may delay the project or otherwise subject the company to financial or regulatory risk Provide guidance to IT project teams globally in the area of Privacy to be compliant with applicable corporate, division, and regulatory requirements Participate in self-assessment processes for regulatory and non-regulatory compliance such as PCI, SWIFT, C-TPAT, CFATS, etc. Participate in control testing and review processes, examining evidence presented by control owners. Participate in, and maintain, strong working relationships with groups involved with information security matters such as the Legal Department, Internal Audit, Privacy. Review current technology and information policies and practices for continued applicability and effectiveness. Provide recommendations for improvements. Minimum 5 years of Information Security, Data Privacy, or IT Compliance experience. Familiarity with, and experience using, a variety of information security control frameworks, including, but not limited to: NIST Cybersecurity Framework, ISO 2700X, PCI-DSS, SWIFT, Cloud Controls Matrix, HITRUST, NIST 800-171, CIS Controls, etc. Familiarity with global and regional Data Privacy regulations such as GDPR, HIPAA, and CCPA. Experience aligning and testing information security controls and frameworks. Experience writing policies and procedures. Experience working in information security or data privacy in a large, global organization. Strong project management, collaboration, communication and organizational skills. Certified Information Security Manager (CISM), Certified Information Privacy Technologist (CIPT), or other equivalent certifications preferred. Adept at communicating concepts to diverse audiences with varying skill sets. Strong written and verbal communication skills are critical. Associated topics: identity access management, information security, information technology security, malicious, phish, protect, security, security engineer, threat, violation