> Markdown version of [/jobs/ext/4707307-director-information-security-regulatory-assurance](https://www.wearedevelopers.com/jobs/ext/4707307-director-information-security-regulatory-assurance). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Director, Information Security Regulatory Assurance

- **Company:** AbbVie Inc.
- **Location:** North Chicago, IL, United States
- **Experience:** Expert
- **Salary:** $160,500 - $305,000
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Data Security, Internet Security, PCI Data Security Standards
- **Published:** November 13, 2026
- **Apply:** https://www.careerbuilder.com/job-details/director-information-security-regulatory-assurance-north-chicago-il--2ed338a8-b63f-445c-b3b6-6fabc0fcd997

## About the Role

Information/Data Security (InfoSec), Insurance Regulations, Medical Products, Problem Solving Skills, Facebook, YouTube, LinkedIn, Internet Security, Information/Data Security (InfoSec), Regulatory Compliance, Required

 * Bachelor's Degree and 10 years of experience; Master's Degree and 9 years of experience. PhD and 5 years of experience.
 * Significant experience in cybersecurity governance, risk, compliance, audit, assurance, or regulatory programs.
 * Ability to communicate problems in terms that are understandable to BTS Leadership and end users at all levels.
 * Subject matter expert in technology and/or business domain.
 * Demonstrated experience leading complex, cross-functional assurance, regulatory or audit initiatives.
 * Strong knowledge of cybersecurity controls, control testing, evidence, remediation, and audit practices.
 * Ability to interpret regulatory requirements and translate them into operational control and assurance requirements.

Preferred

 * Master's Degree preferred.
 * Experience in the pharmaceutical industry preferred.
 * Experience with several of the following:
 + NIS2
 + ISO/IEC 27001, + SWIFT Customer Security Controls Framework
 + PCI DSS
 * Relevant certifications may include CISA, CISM, CISSP, CRISC, ISO 27001 Lead Auditor/Lead Implementer or equivalent credentials.

## Description

The Director, Information Security Regulatory Assurance is responsible for establishing and leading a sustainable enterprise capability to demonstrate compliance with applicable cybersecurity regulatory, statutory, and industry assurance requirements.

This role provides strategic leadership and operational oversight for the organization's cybersecurity regulatory assurance portfolio, including NIS2, CCPA, U.S. Department of Justice data security requirements, China MLPS, SWIFT, and PCI, as well as emerging requirements that create cybersecurity audit, assessment, certification, attestation, or evidence obligations.

The Director will translate regulatory requirements into practical assurance expectations, coordinate readiness and assessments across Information Security, technology teams, business organizations, affiliates, manufacturing sites, R&D locations, and provide leadership with clear visibility into readiness, risk, deficiencies, and remediation.

Responsibilities

 * Strategy & Influence: Work with domain senior leadership and make contributions to develop strategy. Adapt and execute domain strategic plans. (Information Security Regulatory Assurance Strategy & Governance)
 * Cyber Regulatory Portfolio Leadership: Manage and communicate the assurance calendar and priorities.
 * Control & Evidence Assurance / Continuous Monitoring and Issues, Risk & Remediation
 * Liaison & Relationship Building: Build collaborative relationships and effectively interact frequently with business and/or technology senior leaders. Interactions focused on project and operational decisions. Interact well with diverse groups within function and maintain strong working relationships with internal and external collaborators. (Audit, Assessment & Attestation Management)
 * Decisions & Policies: Make key decisions that are guided by established strategies and priorities. Influence operating policies and procedures that affect the domain based on changes in the regulatory environment. Interpret enterprise-wide policies, processes and procedures that may affect teams and domain workflow. (Regulatory Change & Emerging Requirements)
 * Strategy & Influence: Work with domain senior leadership and make contributions to develop strategy. Adapt and execute domain strategic plans. (Executive Reporting & Stakeholder Management)
 * Process Improvement & Optimization: Drive opportunities to improve process and/or technology. (Assurance Transformation & Continuous Improvement)