Manager, Third-Party Risk Management Office - AbbVie

AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas – immunology, oncology, neuroscience, and eye care – and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us at www.abbvie.com. Follow @abbvie on Twitter, Facebook, Instagram, YouTube and LinkedIn. 

The Manager, Third-Party Risk Management Office role is accountable for facilitation of 3rd-party risk management processes.   Collaborates cross-functionally to help mature and execute the  3rd-party risk management processes which include; governance, risk assessment, risk analysis, risk metrics, risk reporting, supplier monitoring, internal / external audit support and technology enablement.  Provides oversight to TPRMO coordination for the end-to-end risk management activities throughout the TPRM lifecycle Serves as direct point of contact between TPRMO and functional risk leaders within AbbVie 

• Responsible for tracking and reporting compliance with TPRM Policies and procedures
• Ensure management and administration of all applicable TPRM policies, procedures and technology are followed.  Reviews, provides input and implements measures to improve procedures as applicable.
• Establish and oversee formal risk analysis and risk-assessment programs for various TPRM systems and processes.
• Ensure and monitor compliance of Business on-going risk management activities and report on instances of non-compliance.
• Liaise with assigned functional risk leaders and cross-functional teams such as Internal Audit, Global Security, Corporate Compliance, Office of General Counsel and Risk Management to remediate new and outstanding issues; track security-related issues.
• Participate in the overall creation and maintenance of AbbVie’s risk, security; compliance policies, standards, guidelines and baselines.
• Oversee third party risk landscape across the enterprise and communicate changes to the appropriate senior stakeholders as well as governance committees.
• Maintain expertise on governance, risk, security & compliance trends through training, research and development to mitigate potential security exposures.
• Ensure third party data integrity and inventory management within the Third-Party Risk Management Technology.

#LI-AL1

• Bachelor’s Degree required; degree in Engineering, Business Administration, Supply Chain Mgmt preferred
• 7 years experience; in-depth understanding with all aspects of regulatory and contractual compliance, especially Sarbanes Oxley, and Health Information Portability and Accountability Act (HIPAA), ISO27001 etc requirements
• Knowledge of principles and best practices (industry certifications preferred) in these areas:
• Information Security, Privacy, Business Continuity, Disaster Recovery
• Risk Assessment skills and Audit background required
• Experience communicating and presenting both verbally and in writing to various audiences, including committees, large groups, senior management, and executive leadership.
• Experience with IT process, risk and control frameworks, such as COBIT, ISO 27001, ITIL, Risk IT.
• Advanced knowledge of risk assessment design and delivery preferred.
• Professional security management certification: CISSP or CISA preferred.
• Requires knowledge of outsourcing methodologies and operating models and working with professional services firms.
• Requires experience overseeing geographically distributed and culturally diverse workgroups.

Applicable only to applicants applying to a position in any location with pay disclosure requirements under state or local law: ​

​

• The compensation range described below is the range of possible base pay compensation that the Company believes in good faith it will pay for this role at the time of this posting based on the job grade for this position. Individual compensation paid within this range will depend on many factors including geographic location, and we may ultimately pay more or less than the posted range. This range may be modified in the future.​

• We offer a comprehensive package of benefits including paid time off (vacation, holidays, sick), medical/dental/vision insurance and 401(k) to eligible employees.​

• This job is eligible to participate in our short-term incentive programs. ​

• This job is eligible to participate in our long-term incentive programs​

​

Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, incentive, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole and absolute discretion unless and until paid and may be modified at the Company’s sole and absolute discretion, consistent with applicable law. ​

​

AbbVie is an equal opportunity employer and is committed to operating with integrity, driving innovation, transforming lives, serving our community and embracing diversity and inclusion.  It is AbbVie’s policy to employ qualified persons of the greatest ability without discrimination against any employee or applicant for employment because of race, color, religion, national origin, age, sex (including pregnancy), physical or mental disability, medical condition, genetic information, gender identity or expression, sexual orientation, marital status, status as a protected veteran, or any other legally protected group status.

US & Puerto Rico only - to learn more, visit https://www.abbvie.com/join-us/equal-employment-opportunity-employer.html 

US & Puerto Rico applicants seeking a reasonable accommodation, click here to learn more:

https://www.abbvie.com/join-us/reasonable-accommodations.html