Pharmaceuticals
10 AbbVie security leaders
These ten current and former AbbVie security leaders have held CISO, director and business information security officer roles at AbbVie, across business information security, application security, GRC, third-party risk and data protection. A reader can learn how security leaders work at AbbVie from people who have held the role.
Professionals to explore
01—10Brenda Ferraro
LinkedInExperience: Director - Third Party Risk Management (TPRM) · AbbVie
Director - Third Party Risk Management (TPRM) at AbbVie since July 2024; the profile headline lists third-party risk management, information security risk management and GRC. Other roles shown are Information and Cyber Security - Strategy, Governance, and Enablement Tech Business Services Executive at Wells Fargo (2021–2024) and Vice President, Third Party Risk at Mitratech Prevalent (2019–2021).
David Monahan
LinkedInExperience: Former Business Information Security Officer · AbbVie
Former Business Information Security Officer at AbbVie (2021–2024). Other roles shown are SVP, Business Information Security Officer at Bank of America (2019–2021) and Managing Director, Security and Risk Management at Enterprise Management Associates (2013–2019); the profile cites building security programs, including founding CISO roles at NetApp and Polycipher.
Eric Johnson
LinkedInExperience: Application Security Director · AbbVie
Application Security Director at AbbVie since July 2025; the profile lists experience in security architecture, application security, DevSecOps and secure code reviews. Other roles shown are Global Cloud Security Director at Axway (2022–2025), Managing Director - Security Architecture at Blue Cross Blue Shield Association (2017–2021) and SANS GIAC Advisory Board member since 2008.
Jeff Leighliter
LinkedInExperience: Business Information Security Officer · AbbVie
Business Information Security Officer at AbbVie since July 2024, the senior information security partner for the Global Information Research business function according to the profile. Other roles shown are Director Business Governance and Quality Process at Astellas Pharma US (2020–2024), V.P. IT Risk, Compliance & Information Security at Stericycle (2018–2019) and a director role at Abbott (2009–2018).
Maria Ximena Serrano-Perkins
LinkedInExperience: Business information security officer · AbbVie
Business information security officer at AbbVie since August 2025, based in the Greater Chicago Area. Other AbbVie roles the profile lists as current are information security (since 2022), Global BTS security executive manager (since 2019), Regional BTS services and systems LA executive manager (since 2016) and Regional IT services Latam senior Manager (since 2015).
Robert (Robbie) Higgins
LinkedInExperience: Former Chief Information Security Officer (CISO) & VP of IT Risk Management · AbbVie
Former Chief Information Security Officer (CISO) & VP of IT Risk Management at AbbVie (2015–2019), responsible for building, developing and leading AbbVie's information security and IT risk management program globally according to the profile. Another AbbVie role shown is Chief Information Security Officer (CISO) (2013–2015); now Partner (Principal) Cyber Security at PwC since August 2019 and Adjunct Professor at Northwestern University since 2022.
Rohit Malhotra, CISA, CISM, CDPSE
LinkedInExperience: Director GRC Strategy and Risk Management · AbbVie
Director GRC Strategy and Risk Management at AbbVie since May 2022; the profile describes a global GRC executive. Other roles shown are Vice President, Global Governance Risk & Compliance (2021–2022) and Director – Governance Risk & Compliance (2018–2021) at Dun & Bradstreet, and Director, Policy, Governance & IT Compliance at S&P Global (2017–2018).
Shannon Sword
LinkedInExperience: Director, Data Protection Office · AbbVie
Director, Data Protection Office at AbbVie since August 2024, with a profile headline that reads Director, Information Security and a description of helping secure AbbVie's information assets in Business Technology Solutions. Other AbbVie roles shown are Director, Value Delivery (2023–2024), Director Corporate Services (2021–2023) and Associate Director (2017–2020).
Steven Weber
LinkedInExperience: Former CISO Chief of Staff, Director Information Security and Risk Management Operations · AbbVie
Former CISO Chief of Staff, Director Information Security and Risk Management Operations at AbbVie (2022–2026), based in North Chicago, serving as strategic partner and chief advisor to the CISO according to the profile. Other roles shown are Director IT Risk Management and Compliance (2015–2022) and Director Internal Audit (2013–2015) at Cardinal Health.
Ted Douglas
LinkedInExperience: Business Information Security Officer · AbbVie
Business Information Security Officer at AbbVie since July 2025; the profile headline reads Global Business Information Security Officer (BISO). Other roles shown are Senior Director, Global Automation Engineering, Cybersecurity and Technology at Pfizer (2022–2024), IT, Security and Automation Systems Engineering Lead at Kellogg Company, and an IT and cybersecurity role at the DoD Defense Logistics Agency (2010–2013).
Choose the right perspective
Match the person's area, such as business information security for a specific function, application security, GRC, third-party risk or data protection, to the question you are bringing. Check whether the person is still at AbbVie before asking about current practice.
Questions to take into the conversation
- 01How does a biopharma company assign business information security officers to research, commercial and manufacturing functions?
- 02How do pharma security teams assess the security of third-party vendors and partners?
- 03How does a CISO's office run its operating rhythm and reporting to executives?
Reaching AbbVie security leaders
How can I contact one of these AbbVie security leaders?
Pick one of the 10 people on this page and choose "Book a paid call", or describe your project to find others. You offer a fee for a 15-minute call or a written answer, Instant Expert finds the person's work email and sends the invitation, and they decide whether to accept. The list covers 1 company: AbbVie, based on profile data retrieved on October 15, 2026. Being listed here doesn't mean someone has agreed to take calls.
How much does it cost to reach AbbVie security leaders?
You choose the offer, starting at $5 per person. The offer is what the person receives, and Instant Expert's fee is added on top, so a $100 offer costs you $125. The fee is 20% of what you pay. You're charged only when the person books the call or sends the answer.
What if they don't reply?
You pay nothing. Instant Expert sends follow-up reminders, and if the person hasn't booked or answered within 7 days, the request expires and any hold on your card is released. You can invite several of the 10 people on this list at once and cap your total spend, so you pay only for the ones who accept.
Can an AI agent ask one of these AbbVie security leaders a question?
Yes. An agent with a USDC wallet on Base can ask one question without an Instant Expert account. It names the person, for example by the LinkedIn URL on this page, and pays per ask over x402 (HTTP 402). The person answers in writing or by voice note, and if nobody answers within 7 days, the payment goes back to the wallet automatically. x402 docs
About this directory
This is a professional research starting point based on business profile data retrieved on . Titles and companies reflect that source snapshot; roles marked former had ended by then. Check the linked profiles for current details. Inclusion does not imply Instant Expert membership or availability.
Request a correction or removal