Company Description
About AbbVie
AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas including immunology, oncology and neuroscience - and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us at www.abbvie.com.
Job Description
People. Passion. Possibilities. Three words that make a world of difference.
More than a job. It's a chance to make a real difference.
Welcome to AbbVie! As part of an international company with 48,000 employees worldwide and around 3,000 employees in Germany, you will have the opportunity of addressing some of tomorrows unmet medical needs in close collaboration with your colleagues. Are you passionate about improving global health care? Do you want to contribute to improving patients' quality of life through your expertise? In a challenging work environment that offers opportunities of developing and increasing your own skills? Youve come to the right place!
Together, we break through – asRegional Information Security Manager (all genders)
The AbbVie Regional Information Security Manager (RISM) EMEA (all genders), is responsible for strengthening AbbVie's information security posture within the EMEA region. This role is a main point of contact for information security and risk management in EMEA, ensuring strategic alignment with global frameworks and integrating robust governance structures. RISM works closely with affiliates, commercial teams, R&D, manufacturing, and regional leadership to build trusted partnerships, ensuring that security strategies and controls align with business objectives, regulatory requirements, and evolving threats. The RISM EMEA is dedicated to instilling a culture of cybersecurity across the AbbVie organization.
Make your mark:
Security Leadership & Culture
- Act as the primary liaison for information security and risk management across EMEA.
- Instill a culture of cybersecurity through ongoing engagement, awareness, and tailored communications, targeting all levels of personnel.
- Develop strong, trust-based relationships with business leaders and affiliates in EMEA, ensuring security strategies align with local goals.
Security Governance
- Support and enforce information security governance frameworks, policies, and standards tailored to EMEA operations and affiliates.
- Continuously review and enhance regional security reporting metrics, providing clear value and insights to business and technical stakeholders.
Risk and Compliance
- Contribute EMEA-specific inputs to risk assessments in partnership with global GRC and vulnerability management teams.
- Engage with local regulatory bodies, compliance, and legal teams to monitor and support evolving legal and compliance needs.
- Work in line with NIS2 guidance, GDPR and local data protection laws, contributing to the development and communication of security policies, procedures, processes, and regional plans to help establish the security baseline across our affiliates in EMEA.
Stakeholder Engagement
- Serve as the trusted information security advisor to EMEA BTS, legal, HR, and manufacturing leadership, and facilitate cross-functional alignment for cybersecurity initiatives.
- Understand affiliate strategies, tailoring security requirements and approaches to support local business objectives and risk tolerances.
Incident Management
- Act as the regional point of contact for business-facing communication during security incidents or investigations.
- Ensure effective coordination with SOC/IR teams on response workflows, focusing on stakeholder updates and clear, business-appropriate messaging.
Security Awareness & Training
- Facilitate the localization, tailoring, and delivery of globally led awareness efforts and tabletop exercises for EMEA audiences.
- Adapt global materials to regional contexts to enhance engagement and work closely with global program leads to ensure cultural relevance.
Continuous Improvement
- Continually review, report, and seek enhancements for EMEA's security posture, leveraging feedback from affiliates and evolving regulatory/industry standards.
Qualifications
This is how you make a difference:
- Bachelor's degree in IT, Cybersecurity, Computer Science, or related field (advanced degree preferred).
- Minimum 5 years’ experience in information security management, with proven ability in regional/global organizations and a record of cultural and stakeholder alignment across multiple countries.
- Recognized security certifications (CISSP, CRISC, CISM, CISA, etc.) and familiarity with key technologies and frameworks (DLP, IAM, cryptography, cloud security, ISO/NIST, vulnerability management, incident response, etc.)
- Experience working independently and across functional, geographic, and cultural boundaries in EMEA.
- Experience working remotely from supervisors/stakeholders.
- Excellent verbal and written communication skills as well as strong analytical/problem-solving skills.
- Proficient language skills in Englisch and German.
Travel: Up to 20%.
What we offer you:
- with a diverse work environment where you can have a real impact
- with an open corporate culture
- with an attractive salary
- with an intensive onboarding process with a mentor at your side
- with flexible work models for a healthy work-life balance
- with a corporate health management that offers comprehensive health and exercise programs
- with company social benefits
- with a wide range of career opportunities in an international organization
- with top-tier, attractive development opportunities
- with a strong international network
