IT Controls Engineer II
Posted Oct 5, 2026 · We last checked this listing on Oct 6, 2026
Likely interview questions for this role
Written from this job description, not a generic list. Each one notes what the interviewer is really checking.
About your past
Tell me about a control you automated. What did it replace and what improved?
What they are checking: Whether they have actually driven automation in governance work, which the posting emphasizes.
Tell me about a time you worked with auditors and disagreed with a finding.
What they are checking: Whether they can engage auditors with evidence and professionalism, not defensiveness.
Tell me about a gap you found in a control framework. How did you get it fixed?
What they are checking: Whether they can spot weaknesses and follow through until they are closed.
What would you do
An engineering team keeps failing the same access review control. How do you handle it?
What they are checking: Whether they find the root cause and fix the process rather than writing the same finding repeatedly.
Developers see controls as red tape. How do you get them on your side?
What they are checking: Whether they can earn cooperation by making compliance easier rather than enforcing it from outside.
About the work
Walk me through how you'd design a control for a software deployment pipeline so it's both compliant and doesn't slow developers down.
What they are checking: Whether they can build controls into delivery processes instead of adding manual gates.
In a pharmaceutical company, what regulations shape IT controls, and how do they differ from SOX?
What they are checking: Whether they understand GxP and 21 CFR Part 11 alongside financial controls in a regulated setting.
How do you test whether a control is actually effective, not just documented?
What they are checking: Whether they know design versus operating effectiveness testing and how to gather real evidence.
How would you perform a risk assessment on a new cloud application before it goes live?
What they are checking: Whether they can identify the real risks and match controls to them in proportion.
How do you write a control description so that someone else can test it without asking you questions?
What they are checking: Whether their documentation is clear and testable, which makes audits smoother.
Practice this interview out loud.
Offer builds a real interview for this exact role at AbbVie from your resume and this job description, asks the questions one at a time, and tells you what landed. The first one is free.
Practice this out loudThe full job description
As published by AbbVie.