SOX Risk Architect and Compliance Lead

About Abb Vie

Abb Vie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas including immunology, oncology, and neuroscience - and products and services in our Allergan Aesthetics portfolio. For more information about Abb Vie, please visit us at  Follow @abbvie onLinked

In,Facebook,Instagram,Xand You Tube .

The Sarbanes Oxley (SOX) Risk Architect & Compliance Lead role is accountable for facilitation of IT risk management processes.

Collaborates cross-functionally to help mature and execute the IT Risk Security and Compliance processes which include governance, risk assessment, risk analysis, risk metrics, risk reporting, supplier monitoring, internal / external audit support,and technology enablement. Provides leadership for the creation of aSOXCompliance Strategy, project execution and improvement initiatives for IT. Creates strategies and processes related to all areas of Governance, Risk Management and Compliance.

May coordinates the efforts of several groups to ensure compliance with other federal and industry regulations and requirements.

Responsibilities:

• Establish and oversee formal risk analysis and risk-assessment programs for various Information Services systems and processes, focusing on SOX-related controls.
• Drive technologyenablementto automate the delivery of SOX audit evidence.
• Ensure andmonitorcompliance with SOXas well as other federal and industry regulations and requirements.
• Liaise with Internal Audit,Internal Controls,external Auditors and BTS application teams/control ownersto remediate new and outstanding issues; track compliance-related issues.
• Participate in the overall creation and maintenance of Abb Vie’s risk, security & compliance policies, standards,guidelines,and baselines.
• Maintainexpertiseon governance, risk,security& compliance trends through training,research,and development in order to mitigate potential security exposures.
• Responsible for compliance with applicable Corporate and Divisional Policies and procedures
• Ensure that all applicable Abb Vie IT policies and procedures are followed. Reviews andprovideinput to improve procedures as applicable.

Required:

• Bachelor's Degreein Information Technology, Computer Science or Computer Engineering with 7 years’ experience;
  Or Master's Degree with 6 years’ experience;
  Or PhD with 2 years of experience with IT compliance, IT risk, and/or IT audit.
• In-depth understanding with all aspects of regulatory and contractual compliance, especially
  
  Sarbanes Oxley (SOX).
• Advanced knowledge of risk assessment design and delivery.
• Experience communicating and presenting both verbally and in writing to various audiences, including committees, large groups, senior management, and executive leadership.
• Experience with IT processes, risk, and control frameworks, such as COBIT, ISO 27001, ITIL, Risk IT.
• Requires knowledge of outsourcing methodologies and operating models and working with professional services firms.
• Requires experience overseeing geographically distributed and culturally diverse work groups.

Preferred:

• Experience with Software Development Lifecycle (SDLC) methodologies preferred.
• Professional security management certification: CISSP or CISA preferred.

Applicable only to applicants applying to a position in any location with pay disclosure requirements under state orlocal law:

• The compensation range described below is the range of possible base pay compensation that the Company believes ingood faith it will pay for this role at the timeof this posting based on the job grade for this position.
  
  Individual compensation paid within this range will…