Senior IT Privacy Compliance Consultant

The Senior IT Privacy Compliance Consultant provides senior-level consultation and direction to functional areas on IT Privacy Compliance - policy, process, and procedures. Identifies, proposes, initiates, and leads significant improvement programs related to IT Privacy Compliance. Leads the IT Privacy Compliance activities across multiple projects/client areas. Performs resource planning and allocation across multiple projects/client areas for IT Privacy Compliance activities. Ensures that documentation follows policy and procedures. Develops and leads the implementation of testing methodologies and/or IT Privacy Compliance practices across multiple divisions. Responsible for the interpretation and communication of systems compliance regulations within the division.

This position is part of AbbVie’s Information Security & Risk Management (ISRM) team.  We are here to put our partners in a position to succeed. We do it by providing the knowledge, tools, and support they need to effectively use data and technology while also effectively managing ri

Responsibilities:

• Develops and directs the IT Privacy program; develops and implements a Privacy by Design program; develops and implements IT playbooks for Data Privacy, including guidance for anonymization and deidentification of data and develops and monitors IT privacy metrics.
• Conducts IT-specific training on Data Privacy, including training for software quality privacy SMEs.
• Aligns with Global Data Privacy initiatives. Develops close partnerships with Global Data Privacy, Legal Privacy, and the China Cyber Security Law team.
• Continually monitors news and publications of interest in the Data Privacy arena, calling out new or applicable regulations impacting AbbVie IT.
• Develops business relationships and integrates activities with internal and external departments to ensure successful implementation and support of IT Privacy efforts by ensuring consistent IT Compliance practices.
• Identifies information required to support the business processes and collaborates in the development of appropriate strategies.  Proactively seeks out strategic business opportunities.
• Develops and proposes solutions to ensure on-going compliance with industry rules and regulations (internal and external).  Decisions are critical to organization success.  Decisions impact achievement of business area objectives. Significantly contributes to business process improvement and overall knowledge of the organization.

• Bachelor's Degree or equivalent experience
• 5-7+ years’ experience in an IT policy, data privacy or compliance role with a focus on Data Privacy in an IT setting.
• Familiarity and direct experience with GDPR, China Cyber Security Law, and other regional privacy regulations is required.
• Understanding of information technology terminology and applicability of data privacy regulations is required.
• Experience building and administering a Privacy by Design program is preferred.
• Excellent analytical, judgment and consultative capabilities and communication skills and the ability to work with IT management and staff.
• Relevant certifications (CIPP, CIPT, CDPSE, CISM, CISSP, CISA, etc) are preferred