Cybersecurity Architect - Mergers & Acquisitions

About the role

AbbVie is looking for a Security Architect with experience in mergers and acquisitions to join our Information Security & Risk Management (ISRM) Security Architecture team. AbbVie's Information Security group engages with our business development teams through several stages of a company relationship, whether it is a research-sharing relationship or an acquisition. We provide advisory services to reduce both risk and technical friction in these transactions.

As a Security Architect, you will act as a single-point-of-contact between security and other technical and business teams, operating across both operational and strategic levels, developing and coordinating design and advisory responsibilities with different areas of the information security group on individual acquisitions and research ventures.

You will interact with internal research and business intelligence teams, technical teams, and other members of the information security group to develop and deliver security products and services. You will play a key role in further shaping the services this program is delivering, while ensuring in-flight acquisitions have the right security services provided at the right times.

This role will reside within the security architecture team, with a "dotted line" relationship with our cybersecurity threat intelligence team.

This position can be virtual/remote anywhere in U.S.

Responsibilities

• Partner with infrastructure and technology teams, security teams, and acquisition target teams to coordinate core security and tech services during acquisition or divestiture.
• Partnering with infrastructure, tech and security teams to develop, document, and deploy secure design patterns for collaborations with strategic alliance partners.
• Partner with internal security and technical teams to develop new security playbooks and services focused on business alliances and strategic acquisitions.

Qualifications & Requirements

Required

• Bachelor's Degree and 7 years of experience OR Master's Degree and 6 years of experience OR PhD and 2 years of experience
• Practical experience in a relevant discipline of security architecture (Cloud Security, AppSec, Network Security, Identity, Operational Technology) and can speak to practical solutions they have designed and successfully implemented.
• Direct experience with designing and/or providing solutions related to mergers, acquisitions, divestitures, and/or multi-company collaborations.
• Working knowledge of popular cloud platforms and associated security solutions (AWS, GCP, Azure) and collaboration platforms (M365, Slack)
• Working knowledge of Active Directory and related security constructs (domains, forests, trusts, etc.)
• A solid understanding of industry security standards, such as NIST 800, ISO 27001, etc.

Preferred

• 5 years of experience in an information security role, preferably as a Security Architect or Security Engineer
• Experience with a variety of security tooling and capabilities, preferably with some hands-on/operational exposure (self-hosted and cloud)
• GCFE, GCFA, GDSA, GCTI, GCIA, GCDA, GEIR certifications are strongly preferred.
• Related technical/industry certifications (e.g., SANS, AWS, etc.)

Additional Information

Applicable only to applicants applying to a position in any location with pay disclosure requirements under state or local law:

• The compensation range described below is the range of possible base pay compensation that the Company believes in good faith it will pay for this role at the time of this posting based on the job grade for this position. Individual compensation paid within this range will depend on many factors including geographic location, and we may ultimately pay more or less than the posted range. This range may be modified in the future.
• We offer a comprehensive package of benefits including paid time off (vacation, holidays, sick), medical/dental/vision insurance and 401(k) to eligible employees.
• This job is eligible to participate in our long-term incentive programs.

Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, incentive, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole and absolute discretion unless and until paid and may be modified at the Company's sole and absolute discretion, consistent with applicable law.