Senior Manager Cybersecurity Third Party Risk Assurance (Remote)

Company Description

AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas – immunology, oncology, neuroscience, and eye care – and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us at www.abbvie.com. Follow @abbvie on X, Facebook, Instagram, YouTube, LinkedIn and Tik Tok.

Job Description

This is a mid-level cybersecurity manager responsible for the Risk Management Assurance team. This role will be responsible for the evaluation and risk management processes. This role will execute and complete cyber and information security evaluations from intake through risk remediation and will provide a clear career path to more senior manager positions.

Responsibilities

• Lead the risk management assurance team
• Ensure workload balance across the team
• Support career growth of team members
• Present metrics and reporting to senior leadership and key stakeholders
• Identify areas of process improvement
• Work directly with Business Owners and key stakeholders on at-risk third-party evaluations
• Conducting cyber and information security evaluations on AbbVie third parties
• Analyzing cyber and information security controls in relations to AbbVie expectations and requirements
• Be the escalation point for the team
• Thoroughly document work and present findings to management
• Track identified risk to completion, including validation of remediation efforts
• Adhering to cyber security processes, procedures and other documentation while performing analyst duties

Qualifications

• Bachelor's Degree and 8 years of experience OR Master’s Degree and 7 years of experience or PHD and 2 years of experience
• Basic understanding of security controls, concepts, and frameworks (e.g. ISO, NIST, ect)
• Ability to communicate complex technical security practices to non-technical resources
• Familiarity with cyber security terminology and concepts, and basic understanding of the cyber threat landsca