IT Controls Engineer II

About the role

AbbVie is seeking an IT Controls Engineer to help design, implement, and continuously improve technology controls that support secure, compliant, and reliable technology delivery across the enterprise.

In this role, you will collaborate with engineering teams, cybersecurity professionals, quality organizations, auditors, and business stakeholders to integrate controls into software delivery and operational processes. You will help ensure compliance with regulatory requirements, corporate policies, and industry best practices while driving automation, efficiency, and continuous improvement.

This is an excellent opportunity for a technology professional who enjoys solving complex problems, working across cross-functional teams, and helping modernize governance, risk, and compliance practices within a global technology organization.

Responsibilities

• Design, document, and maintain technology controls that support software delivery, cybersecurity, compliance, and operational processes.
• Develop and enhance technology control frameworks, standards, procedures, and support documentation to meet business, regulatory, and corporate requirements.
• Perform risk assessments and control effectiveness reviews to identify gaps, analyze trends, and recommend mitigation strategies.
• Execute control testing and validation activities, documenting results, findings, and recommendations to support audit readiness and continuous improvement.
• Partner with audit, compliance, and risk teams to support audits, regulatory reviews, evidence collection, and remediation efforts.
• Translate business and technical requirements into actionable control requirements and integrate controls into technology delivery and operational processes.
• Identify opportunities to streamline, automate, and improve control execution, monitoring, and reporting capabilities.
• Collaborate with engineering, cybersecurity, quality, compliance, and business stakeholders to communicate control requirements, risks, and recommendations and drive effective outcomes.

Qualifications & Requirements

• Bachelor's Degree with 5 years technical experience, OR Master's Degree with 4 years' experience.
• Experience in one or more of the following areas: IT Controls, Technology Risk Management, IT Compliance, Governance, Risk & Compliance (GRC), Technology Audit, Systems Engineering, Business Systems Analysis, or Quality Systems.
• Experience supporting technology implementations, software delivery, or operational technology processes.
• Strong analytical, problem-solving, documentation, and communication skills.
• Proven ability to collaborate across cross-functional teams and manage multiple priorities.
• Experience with IT control frameworks and industry standards (e.g., SOX, COBIT, NIST, ISO 27001, ITIL).
• Experience supporting controls testing, audits, compliance programs, or risk management activities.
• Knowledge of software development methodologies, including SDLC, Agile, and DevOps.
• Experience working in a regulated industry such as pharmaceuticals, healthcare, medical devices, biotechnology, or financial services.
• Knowledge of cybersecurity concepts and technology risk management practices.

Additional Information

Applicable only to applicants applying to a position in any location with pay disclosure requirements under state or local law:

• The compensation range described below is the range of possible base pay compensation that the Company believes in good faith it will pay for this role at the time of this posting based on the job grade for this position. Individual compensation paid within this range will depend on many factors including geographic location, and we may ultimately pay more or less than the posted range. This range may be modified in the future.
• We offer a comprehensive package of benefits including paid time off (vacation, holidays, sick), medical/dental/vision insurance and 401(k) to eligible employees.
• This job is eligible to participate in our short-term incentive programs.

Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, incentive, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole and absolute discretion unless and until paid and may be modified at the Company's sole and absolute discretion, consistent with applicable law.