Business Information Security Officer - BISO | Supply Chain and Manufacturing

Company Description

AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas – immunology, oncology, neuroscience, and eye care – and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us at www.abbvie.com. Follow @abbvie on X, Facebook, Instagram, YouTube, LinkedIn and Tik Tok.

Job Description

The Business Information Security Officer (BISO) serves as the senior information security partner within specific business units, responsible for aligning cybersecurity strategies with business goals, managing risks, and fostering a robust security culture across the organization. The BISO functions as a bridge between business IT initiatives and the cybersecurity team, providing expert guidance on security risks, compliance, and incident response.

The Business Information Security Officer (BISO) is instrumental in safeguarding the organization's assets by seamlessly aligning cybersecurity strategies with business objectives. Serving as a pivotal link between business units and the cybersecurity function, the BISO elevates the organization's security posture through expert risk management, proactive incident response, and comprehensive compliance efforts. By fostering a robust security culture, working collaboratively with diverse stakeholders, leveraging strong project management, data analytics, and leadership skills, the BISO drives business growth and innovation in a secure and resilient operational environment. This role ensures that cybersecurity is not merely a technical necessity but a strategic enabler of business success as well as competitive advantage.

Responsibilities 

• Strategic Alignment & Risk Management
  • Develop and execute cybersecurity strategies that align with business objectives and regulatory requirements.
  • Identify, assess, and mitigate information security risks across business units, utilizing risk management frameworks.
• Leadership & Collaboration
  • Serve as the primary liaison between busi