Data Protection Specialist
Core
Ensure AbbVie information security policies and procedures are implemented, drive control auditing, assurance activities, governance, and security logging automation.
Role type
Data Protection Specialist (Information Security & Compliance)
Builds
Data protection controls, security assurance processes, and automated monitoring systems.
Domain
Healthcare / Information Security / Data Privacy
Required skills
Information security control frameworks (NIST, ISO 2700X, PCI-DSS, HITRUST), Data privacy regulations (GDPR, HIPAA, CCPA), Control auditing, Policy and procedure development, Vendor security assessment, Security logging automation, Risk assessment
Preferred skills
CISM, CIPT
Technologies
NIST Cybersecurity Framework, ISO 2700X, PCI-DSS, SWIFT, Cloud Controls Matrix, HITRUST, NIST 800-171, CIS Controls, GDPR, HIPAA, CCPA
Responsibilities
Establish relationships with IT and Business leaders to evaluate security requirements and risks; Conduct assessments of data protection controls; Leverage AI to analyze data logs and automate control assurance; Engage third-party vendors to assess security posture; Provide subject matter expertise on security policies to internal organizations; Report on Data Privacy risks and remediation plans.
Seniority
Mid-Senior, hands-on IC
