Director, Procurement Risk, Audit and Compliance

About AbbVie

AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas including immunology, oncology and neuroscience - and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us at www.abbvie.com . Follow @abbvie on LinkedIn, Facebook , Instagram , X and YouTube.

Purpose

The Director, Risk, Audit & Compliance Strategy plays a critical role in strengthening procurement processes through strategic risk management, compliance adherence, and comprehensive audit strategies. The Director, Risk, Audit & Compliance is responsible for ensuring the deployment of strategies within the Risk & Compliance teams in addition to leading and coaching a team, ensuring their professional development aligns with organizational goals. This role demands a candidate with a robust background in enterprise risk management, including areas like IT security, procurement, cybersecurity, business continuity, quality, supplier management, and / or legal.

Responsibilities

Lead the enterprise procurement risk, audit, and compliance strategy, translating priorities into effective governance, controls, and assurance plans.; Establish a procurement risk-management framework covering identification, assessment, mitigation, monitoring, escalation, and reporting.; Lead the integration of Future-State AI tools (AI Risk Intelligence, Predictive Models, Monitoring Agents, and Copilot-Enabled Insights) to automate and optimize risk and compliance functions.; Drive the PRAC 2026-2028 capability roadmap, shifting functional maturity from foundational monitoring to an “Anticipate & Orchestrate” (Risk), “Automate & Optimize” (Audit), and “Predict & Prevent” (Compliance) state.; Implement continuous AI-led monitoring to shift compliance controls from detective to preventive, reducing recurring issues and enabling early identification of compliance weaknesses.; Advance AI strategies to automate routine audit requests, exception tracking, and risk routing, enabling dynamic prioritization and proactive crisis response based on real-time data and predictive analytics.; Design and oversee a risk-based audit program for procurement processes, supplier management, sourcing, contracting, purchasing, and payment controls, track corrective actions through closure.; Ensure adherence to applicable laws, regulations, internal policies, ethical sourcing requirements, delegated authorities, and contractual obligations.; Partner with Legal, Finance, Internal Audit, IT Security, Cybersecurity, Quality, and Business Continuity teams on cross-functional risks and controls.; Oversee supplier and third-party risk management, including due diligence, risk segmentation, monitoring, remediation, and business-continuity considerations.; Define compliance metrics, dashboards, and leadership reporting on material risks, audit findings, and control effectiveness.; Lead investigations and remediation related to procurement compliance concerns, control failures, and audit findings.; Develop policies, standards, training, and communications that reinforce compliant, ethical, and resilient procurement practices.; Lead, coach, and develop the Risk & Compliance team in alignment with organizational goals.

Requirements

Bachelor’s degree in business, supply chain, finance, accounting, law, risk management, or a related field, advanced degree preferred.; 10+ years of progressive experience in procurement, enterprise risk management, audit, compliance, internal controls, or related disciplines, including leadership experience.; Demonstrated experience designing and implementing risk-based compliance and audit strategies in a complex, regulated, or global organization.; Strong knowledge of procurement lifecycle controls, strategic sourcing, contracting, supplier management, third-party risk, and purchase-to-pay processes.; Broad enterprise risk-management experience spanning IT security, procurement, cybersecurity, business continuity, quality, supplier management, and/or legal.; Knowledge of relevant compliance, governance, and control frameworks, CPA, CIA, CISA, CRMP, CCEP, or equivalent certification preferred.