Associate Director - Cybersecurity Posture, Hygiene and AI

Company Description

About AbbVie

AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas including immunology, oncology and neuroscience - and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us at www.abbvie.com. Follow @abbvie on LinkedIn, Facebook, Instagram, X and YouTube.

Job Description

Our Business Technology Solutions (BTS) team shapes the digital transformation accelerating the future of medicine at AbbVie, and we do it together, asking bold questions and tackling complex challenges through deep, honest collaboration. In the role of Associate Director, Cybersecurity Posture, Hygiene and AI, you will join a diverse, global organization that invests in your growth while empowering you to lead teams that secure the technologies improving patients’ lives. 

Role summary 

This role builds and leads an enterprise security posture and hygiene program with a specific emphasis on configuration drift technologies and services. You are a people manager, accountable for setting direction, developing talent, and delivering sustained program outcomes. You will define the strategy, operating model, metrics, and governance needed to continuously improve control effectiveness across on‑premise and cloud environments and ensure AI-enabled workflows operate within enterprise security, privacy, and data protection expectations by detecting misuse, configuration drift, and control gaps. 

About our team 

You will join the Business Technology Solutions (BTS) Information Security and Risk Management (ISRM) organization. Our team focuses on reducing systemic risk by strengthening baseline security controls, improving configuration hygiene, and building scalable programs that enable safe adoption of modern and AI-enabled technologies across the enterprise. 

In this role, you will be responsible for 

• Building and leading a security posture and hygiene program, including strategy, roadmap, operating cadence, governance, and direct people management. 

• Managing and developing a multidisciplinary team responsible for control assessments, configuration hygiene, remediation planning, and continuous improvement, including hiring, coaching, performance management, and career development. 

• Leveraging AI as an accelerator and enabler to drive speed and efficiency in continuous control monitoring and response 

• Integrating posture and hygiene telemetry from AI-enabled tools, custom tools and workflows to detect misuse, configuration drift, and critical control deviations 

• Identifying patterns of intentional and unintentional misuse of AI-enabled tools and workflows and translating those findings into preventive, systemic control improvements. 

• Developing and maturing a control framework aligned to the Center for Internet Security (CIS) Top 18 Controls and associated safeguards, tailoring implementation guidance to AbbVie environments. 

• Establishing a consistent methodology to assess control maturity, identify systemic gaps, and prioritize remediation based on risk and business impact. 

• Partnering with infrastructure, cloud, identity, network, endpoint, application, and AI engineering teams to embed secure-by-default configurations and resilient architectures. 

• Building metrics, dashboards, and executive-ready reporting that provide actionable insight into posture trends, control effectiveness, and remediation progress. 

• Driving enablement by publishing standards, playbooks, and guidance that helps teams design, deploy, and operate securely. 

• Continuously evolving the program by staying current on emerging risks related to AI, automation, and modern attack techniques. 

Tools and skills you will use in this role 

• Security control frameworks and maturity models (e.g., CIS Controls). 

• Hybrid cloud and enterprise security posture concepts. 

• Network and endpoint security posture concept