Security Analyst, Data Security

About AbbVie
AbbVie’s mission is to discover and deliver innovative medicines that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people’s lives across several key therapeutic areas: immunology, oncology, neuroscience, eye care, virology, women’s health and gastroenterology, in addition to products and services across its Allergan Aesthetics portfolio. For more information about AbbVie, please visit us at www.abbvie.com. Follow @abbvie on Twitter, Facebook, Instagram, YouTube and LinkedIn.

Purpose Statement:

AbbVie Information Security is looking for an individual to join the Data Security Response Team as a mid-level member of the team working to support the protection of AbbVie sensitive data. This individual will have the responsibility for daily monitoring of alerts generated by AbbVie’s Data Loss Prevention (DLP) solutions and investigating sensitive data transfers. This individual will be expected to analyze available telemetry data and determine which events present a potential data security incident and business impact to AbbVie that requires escalation to Legal, Human Resources, and Office of Ethics and Compliance. This individual will work together with Legal and Human Resources to perform appropriate DLP Remediation processes to remove AbbVie data from unauthorized locations.

Major Responsibilities:

• Perform daily monitoring and analysis of Data Loss Prevention alerts from the Data security product(s) 
• Prepare and present formal incident reports
• Interpret and summarize technical information to a non-technical audience
• Provide subject matter expertise in DLP data to Support Global Legal, Human Resources, Compliance Investigation and Business Technology Solutions (BTS) teams  
• Assist Global Legal, Human Resources, and Compliance Investigations in processing DLP Remediation requests which may include confirming that AbbVie data is removed from unauthorized locations
• Mentor and support Data Security Response Analysts in analyzing complex telemetry data
• Engage with Data Security consulting to improve alert fidelity
• Assist with resolution of operational Data Loss Prevention technology deployment, implementation, and functional issues
• Develop and improve processes and procedures for Data Security response activities
• Support quality management across Data Security Response Team processes
• Lead creation of reports and metrics for leadership across BTS, Legal, Human Resources, and Office of Ethics and Compliance

Qualifications

Basic Qualifications:

• Ability to analyze and understand technical information
• Clear understanding on how data resides on an endpoint and the different egress vectors
• Ability to author and present clear and concise incident reports
• Ability to maintain business acumen during complex situations
• Familiarity with data classification concepts and processes
• Education & Experience 
  • Bachelors degree with 5 years or Masters degree with 4 years of experience

Desired / Preferred Qualifications:

• Experience in conducting cyber security investigations using telemetry data and open source information
• Experience identifying, researching and mitigating cyber security risks and preparing recommendations for mitigation
• Ability to assess impact of security controls to user experience
• Experienced in a wide variety of technical solutions focused on data protection and cyber security; and experience with data loss prevention products
• Experience with integration between Incident Management Systems (SOAR) and SIEM in an enterprise environment
• Security certifications (SANS, ISC2, SEI, CFE)

Significant Work Activities
Continuous sitting for prolonged periods (more than 2 consecutive hours in an 8 hour day)
Travel
No
Job Type
Experienced
Schedule
Full-time
Job Level Code
IC
Equal Employment Opportunity
At AbbVie, we value bringing together individuals from diverse backgrounds to develop new and innovative solutions for patients. As an equal opportunity employer we do not discriminate on the basis of race, color, religion, national origin, age, sex (including pregnancy), physical or mental disability, medical condition, genetic information gender identity or expression, sexual orientation, marital status, protected veteran status, or any other legally protected characteristic.