AbbVie · Chicago
Finance & LegalFull-time
About AbbVie
AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas including immunology, oncology and neuroscience - and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us at www.abbvie.com. Follow @abbvie on LinkedIn, Facebook, Instagram, X and YouTube.
Reporting to the Associate Director for Privacy Compliance, Global Privacy Office, the “Privacy Manager, U.S." is an individual contributor that will play a key role in leading and advancing AbbVie’s U.S. privacy program, serving as a subject matter expert and point of contact for privacy matters, including pharmacy operations. This role will drive AbbVie’s U.S. data privacy compliance program, including privacy impact assessments, audits, privacy reviews, patient-facing materials, and HIPAA requirements. The Privacy Manager, U.S. will also be responsible for strengthening the overall maturity of AbbVie’s privacy obligations and coordinating with cross-functional teams to ensure enterprise-wide privacy compliance.
Major Responsibilities
Provide strategic and day-to-day privacy support for commercial functions, including Aesthetics and Therapeutics, as well as corporate functions such as R&D, HR, and Operations, and related areas including incident response, data governance, and privacy strategy.
Partner closely with cross-functional stakeholders across Commercial, Marketing, Security, Technology Solutions, Third Party Risk Management, and Procurement.
Lead and conduct privacy impact assessments, audits, privacy reviews, and oversight of patient-facing materials, forms, scripts, notices, opt-in/opt-out mechanisms, and consent language.
Develop, Document, and maintain privacy operations processes and procedures.
Triage and documentation of privacy investigations and drive broader privacy operations.
Develop a deep understanding of how data is used across AbbVie’s products and teams, and research, document, and implement privacy requirements for new products and initiatives.
Collaborate with Legal Privacy on relevant matters as needed.
Assist with the development and maintenance of privacy training and awareness programs for business units, new hires, and key stakeholders to foster a culture of privacy compliance across the organization.
Monitor and assess the impact of evolving U.S. federal and state privacy legislation, regulatory guidance, and enforcement trends on AbbVie's business operations and privacy program.
Assist with and report on privacy program key performance indicators and metrics to senior leadership, ensuring visibility into program maturity and risk posture.
Knowledge of and ability to incorporate Privacy by Design (PbD) principles into work products, processes, and decision-making to ensure privacy, data protection, and risk mitigation are considered from the outset and throughout the lifecycle of initiatives.
Bachelor’s degree required. Minimum of 5-7 years of direct privacy experience, with a focus on program operations and governance, risk, and compliance activities.
Deep knowledge of U.S. privacy requirements, including U.S. state comprehensive privacy laws, U.S. state consumer health data laws, life sciences privacy concepts, HIPAA, TCPA, CAN-SPAM, and Federal Trade Commission frameworks.
Experience with privacy matters in the digital and advertising technology ecosystem and the biopharmaceutical industry.
Experience advising on privacy matters related to health information processing and familiarity with patient consent management, call center operations, digital outreach, and vendor oversight.
Highly organized, detail-oriented, and analytically rigorous. Demonstrated ability to manage multiple concurrent projects and workstreams, with strong project management and organizational skills including experience presenting to and advising senior management on privacy matters.
Experience working across a matrixed corporate environment.
Ability to quickly identify issues and appropriately prioritize risk and business impact.
Strong collaboration and influencing skills in a global organization.
IAPP certifications such as CIPP/US, CIPP/T, or CIPP/M are a plus. Experience with EU General Data Protection Regulation is a plus.
Familiarity with privacy/knowledge management platforms and tools (e.g., OneTrust, SNOW, Confluence) is preferred.
Applicable only to applicants applying to a position in any location with pay disclosure requirements under state or local law:
Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, incentive, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole and absolute discretion unless and until paid and may be modified at the Company’s sole and absolute discretion, consistent with applicable law.
AbbVie is an equal opportunity employer and is committed to operating with integrity, driving innovation, transforming lives and serving our community. Equal Opportunity Employer/Veterans/Disabled.
US & Puerto Rico only - to learn more, visit https://www.abbvie.com/join-us/equal-employment-opportunity-employer.html
US & Puerto Rico applicants seeking a reasonable accommodation, click here to learn more:
https://www.abbvie.com/join-us/reasonable-accommodations.html