Jobs › AbbVie

IT Controls Engineer II

AbbVie · North Chicago, IL · Full time · Information Technology

Posted Oct 5, 2026 · We last checked this listing on Oct 6, 2026

Apply at AbbVie

Likely interview questions for this role

Written from this job description, not a generic list. Each one notes what the interviewer is really checking.

About your past

Tell me about a control you automated. What did it replace and what improved?

What they are checking: Whether they have actually driven automation in governance work, which the posting emphasizes.

Tell me about a time you worked with auditors and disagreed with a finding.

What they are checking: Whether they can engage auditors with evidence and professionalism, not defensiveness.

Tell me about a gap you found in a control framework. How did you get it fixed?

What they are checking: Whether they can spot weaknesses and follow through until they are closed.

What would you do

An engineering team keeps failing the same access review control. How do you handle it?

What they are checking: Whether they find the root cause and fix the process rather than writing the same finding repeatedly.

Developers see controls as red tape. How do you get them on your side?

What they are checking: Whether they can earn cooperation by making compliance easier rather than enforcing it from outside.

About the work

Walk me through how you'd design a control for a software deployment pipeline so it's both compliant and doesn't slow developers down.

What they are checking: Whether they can build controls into delivery processes instead of adding manual gates.

In a pharmaceutical company, what regulations shape IT controls, and how do they differ from SOX?

What they are checking: Whether they understand GxP and 21 CFR Part 11 alongside financial controls in a regulated setting.

How do you test whether a control is actually effective, not just documented?

What they are checking: Whether they know design versus operating effectiveness testing and how to gather real evidence.

How would you perform a risk assessment on a new cloud application before it goes live?

What they are checking: Whether they can identify the real risks and match controls to them in proportion.

How do you write a control description so that someone else can test it without asking you questions?

What they are checking: Whether their documentation is clear and testable, which makes audits smoother.

Practice this interview out loud.

Offer builds a real interview for this exact role at AbbVie from your resume and this job description, asks the questions one at a time, and tells you what landed. The first one is free.

Practice this out loud

The full job description

As published by AbbVie.

AbbVie is seeking an IT Controls Engineer to help design, implement, and continuously improve technology controls that support secure, compliant, and reliable technology delivery across the enterprise. In this role, you will collaborate with engineering teams, cybersecurity professionals, quality organizations, auditors, and business stakeholders to integrate controls into software delivery and operational processes. You will help ensure compliance with regulatory requirements, corporate policies, and industry best practices while driving automation, efficiency, and continuous improvement. This is an excellent opportunity for a technology professional who enjoys solving complex problems, working across cross-functional teams, and helping modernize governance, risk, and compliance practices within a global technology organization. Responsibilities • Design, document, and maintain technology controls that support software delivery, cybersecurity, compliance, and operational processes. • Develop and enhance technology control frameworks, standards, procedures, and support documentation to meet business, regulatory, and corporate requirements. • Perform risk assessments and control effectiveness reviews to identify gaps, analyze trends, and recommend mitigation strategies. • Execute control testing and validation activities, documenting results, findings, and recommendations to support audit readiness and continuous improvement. • Partner with audit, compliance, and risk teams to support audits, regulatory reviews, evidence collection, and remediation efforts. • Translate business and technical requirements into actionable control requirements and integrate controls into technology delivery and operational processes. • Identify opportunities to streamline, automate, and improve control execution, monitoring, and reporting capabilities. • Collaborate with engineering, cybersecurity, quality, compliance, and business stakeholders to communicate control requirements, risks, and recommendations and drive effective outcomes. • Bachelor’s Degree with 5 years technical experience, OR Master’s Degree with 4 years’ experience. • Experience in one or more of the following areas: IT Controls, Technology Risk Management, IT Compliance, Governance, Risk & Compliance (GRC), Technology Audit, Systems Engineering, Business Systems Analysis, or Quality Systems. • Experience supporting technology implementations, software delivery, or operational technology processes. • Strong analytical, problem-solving, documentation, and communication skills. • Proven ability to collaborate across cross-functional teams and manage multiple priorities. • Experience with IT control frameworks and industry standards (e.g., SOX, COBIT, NIST, ISO 27001, ITIL). • Experience supporting controls testing, audits, compliance programs, or risk management activities. • Knowledge of software development methodologies, including SDLC, Agile, and DevOps. • Experience working in a regulated industry such as pharmaceuticals, healthcare, medical devices, biotechnology, or financial services. • Knowledge of cybersecurity concepts and technology risk management practices. Applicable only to applicants applying to a position in any location with pay disclosure requirements under state or local law: ​ • The compensation range described below is the range of possible base pay compensation that the Company believes in good faith it will pay for this role at the time of this posting based on the job grade for this position. Individual compensation paid within this range will depend on many factors including geographic location, and we may ultimately pay more or less than the posted range. This range may be modified in the future. ​ • We offer a comprehensive package of benefits including paid time off (vacation, holidays, sick), medical/dental/vision insurance and 401(k) to eligible employees.​ • This job is eligible to participate in our short-term incentive programs. ​ Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, incentive, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company's sole and absolute discretion unless and until paid and may be modified at the Company’s sole and absolute discretion, consistent with applicable law. ​ AbbVie is an equal opportunity employer and is committed to operating with integrity, driving innovation, transforming lives and serving our community.  Equal Opportunity Employer/Veterans/Disabled. US & Puerto Rico only - to learn more, visit https://www.abbvie.com/join-us/equal-employment-opportunity-employer.html US & Puerto Rico applicants seeking a reasonable accommodation, click here to learn more: https://www.abbvie.com/join-us/reasonable-accommodations.html

Apply at AbbVie