About AbbVie

AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas including immunology, oncology and neuroscience - and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us atwww.abbvie.com. Follow @abbvie onLinkedIn,Facebook,Instagram,XandYouTube.

The Associate Director, Global Technology Audit is responsible for leading and developing a team of technology auditors while providing seniorlevel oversight, technical judgment, and risk leadership for global technology audit activities. This role ensures that technology, cybersecurity, data, and emerging technology risks are assessed with appropriate depth, consistency, and business relevance. The Associate Director serves as a people manager and technical risk leader within Internal Audit, accountable for the performance, development, and engagement of a team of auditors. The role complements engagement coordination responsibilities performed by audit staff and supports Directorlevel governance and stakeholder engagement by providing disciplined challenge, coaching, and escalation on complex or judgmentintensive technology risk matters. This position plays a critical role in building and sustaining Internal Audits technology risk capability, particularly in highrisk areas such as cybersecurity, cloud platforms, data and analytics, identity and access management, and thirdparty technology risk.

Responsibilities

• Lead, manage, and develop a team of approximately seven technology auditors, including setting performance expectations, providing ongoing coaching and feedback, conducting performance reviews, and supporting career development and progression.
• Provide seniorlevel oversight and technical judgment for global technology audit engagements, including cybersecurity, infrastructure, cloud platforms, data and analytics environments, identity and access management, and emerging technologies.
• Review and challenge technology risk assessments, audit scope, and conclusions to ensure appropriate focus on control design, sustainability, and risk impact, not solely operating effectiveness.
• Serve as a primary escalation point for complex or judgmentintensive technology risk issues, supporting Directors in determining appropriate risk ratings, issue framing, and management messaging.
• Ensure consistency and quality in how technology risks are identified, assessed, and reported across audits, particularly in highrisk or externally exposed environments.
• Coach and develop Lead and Senior auditors to strengthen riskbased thinking, technical judgment, and the ability to articulate technology risk in clear business terms.
• Contribute to the development, maintenance, and continuous improvement of technology audit methodologies, guidance, and playbooks, with particular focus on cybersecurity and datarelated risk areas.
• Identify emerging technology and cyber risk trends and advise Internal Audit leadership on implications for audit coverage, skills, and resource needs.
• Support integration of technology audit activities with financial and compliance audits, as appropriate, to enhance efficiency and risk coverage.
• Collaborate with Directors to support external audit coordination, cosourcing activities, and talent sourcing strategies to ensure the technology audit team maintains the skills required to address evolving risks.

• Bachelors degree in Information Technology, Computer Science, Engineering, Business, Accounting, or a related field from an accredited four-year college or university. An advanced degree is desirable.
• 8+ years of relevant experience in technology audit, technology risk management, cybersecurity, cloud architecture, data platforms, or related areas, gained through internal audit, consulting, or industry roles.
• Demonstrated peoplemanagement experience, including coaching, performance management, and development of professional staff.
• Strong ability to assess technology and cyber risks using judgmentbased, riskfocused approaches rather than checklistdriven testing alone.
• Solid understanding of technology control design concepts and how technology risks can manifest even when controls are formally in place.
• Experience across multiple technology domains such as cybersecurity, cloud infrastructure, identity and access management, data platforms, thirdparty technology risk, and system development or change processes.
• Proven ability to communicate complex technology and cyber risks clearly to nontechnical stakeholders, including executive management.
• Demonstrated capability to mentor and develop auditors beyond execution into riskbased thinking and technical judgment.
• Familiarity with relevant frameworks and standards (e.g., COBIT, NIST, ISO, cloud shared responsibility models), with the ability to apply them pragmatically.
• Professional certifications such as CISA, CISSP, CRISC, or relevant cloud/security certifications are desirable but not required.

Applicable only to applicants applying to a position in any location with pay disclosure requirements under state orlocal law:

• The compensation range described below is the range of possible base pay compensation that the Companybelieves ingood faith it will pay for this role at the timeof this posting based on the job grade for this position.Individualcompensation paid within this range will depend on many factors including geographic location, andwemayultimatelypay more or less than the posted range. This range may be modified in thefuture.

• We offer a comprehensive package of benefits including paid time off (vacation, holidays, sick),medical/dental/visioninsurance and 401(k) to eligibleemployees.

• This job is eligible to participate in our short-term incentiveprograms.

Note: No amount of payis considered to bewages or compensation until such amount is earned, vested, anddeterminable.The amount and availability of any bonus,commission, incentive, benefits, or any other form ofcompensation and benefitsthat are allocable to a particular employee remains in the Company's sole andabsolutediscretion unless and until paid andmay be modified at the Companys sole and absolute discretion, consistent withapplicable law.

AbbVie is an equal opportunity employer and is committed to operating with integrity, driving innovation, transforming lives and serving our community. Equal Opportunity Employer/Veterans/Disabled.

US & Puerto Rico only - to learn more, visithttps://www.abbvie.com/join-us/equal-employment-opportunity-employer.html

US & Puerto Rico applicants seeking a reasonable accommodation, click here to learn more:

https://www.abbvie.com/join-us/reasonable-accommodations.html