Director Product Cybersecurity

Working at Abbott

At Abbott, you can do work that matters, grow, and learn, care for yourself and your family, be your true self, and live a full life. You’ll also have access to:

• Career development with an international company where you can grow the career you dream of.
• Employees can qualify forfree medical coverage in ourHealth Investment Plan (HIP) PPOmedical plan in the next calendar year.
• An excellent retirement savings plan with a high employer contribution.
• Tuition reimbursement, Freedom 2 Save student debt program, and FreeU education benefit – an affordable and convenient path to getting a bachelor’s degree.

The Opportunity

The Director, Product Cybersecurity reports to the Enterprise and Product Cybersecurity Director. The Product Cybersecurity role is responsible for assisting and ensuring Abbott Products are safe and secure and to build products that are compliant with industry regulation and meet customer and patient security expectations. The Product Cybersecurity role will be a key point of contact for CoreDx division.

• Divisional cybersecurity process Subject Matter Expert (SME) for multiple Abbott Organizations and Process Owner
• Cybersecurity for Medical and Non-medical products
• Cybersecurity Product Inventory
• Cybersecurity Risk and Vulnerability Management and Process
• Identification of Cybersecurity requirements for Suppliers and Distributors
• Providing Cybersecurity input to internal and external communications
• Conducting Cybersecurity Incident Response Tabletop Exercises
• Conducting Cybersecurity Oversight Committee Meetings to inform Executive Leadership of Cybersecurity Initiatives, Goals, and areas of interest.
• Assessment of Cybersecurity regulations for impact to CoreDx products

What You’ll Work On

• Maintain divisional compliance with applicable Corporate and Divisional Policies and procedures including training.
• Maintain divisional compliance with applicable US and International Regulations, gathering cross-functional expertise when needed.
• Collaborate with division cross-functional teams to develop and maintain product cybersecurity risk management and vulnerability management processes and procedures and create and maintain a Secure Product Lifecycle process.
• Lead and support product teams with product cybersecurity to include risk assessments, threat modeling, vulnerability management, cybersecurity deliverables and mitigation plans.
• Process and technical support for commercial deployments of products worldwide to include into restricted (e.g., China, Russia) environments, ensuring compliance with regional cybersecurity and data protection requirements.
• Build and maintain relationships with internal stakeholders, external partners, and customers to enable successful execution of the division product and enterprise cybersecurity program.
• Serve as a trusted advisor and effectively communicate cybersecurity risks with technical and non-technical internal and external stakeholders, including senior leadership.
• Ensures that user community understands and adheres to necessary procedures to maintain security.
• May require familiarity with identity and access management (IAM), domain structures, user authentication mechanisms, network security controls, including firewalls, intrusion detection/prevention systems (IDS/IPS), secure network architecture, internet protocols and digital certificate/signing solutions.
• Balance business objectives with cybersecurity risks by providing risk-based recommendations and clearly articulating trade-offs to leadership for informed decision-making.
• Lead, mentor, and develop cybersecurity professionals, providing coaching, technical guidance, and career development support across the team.

Required Qualifications

• BA/BS in Business, Engineering, Computer Science, or related disciplines. Master’s degree is desirable.
• Overall 10+ years’ experience with 5+ years of experience working in Engineering, Cyber support, or Product support.
• Strong understanding of Customers, Product Cybersecurity and the relationship between threat, vulnerability and potential customer risk in the context of risk management.
• Understanding medical product safety risk and the relationship with product Cybersecurity risk.
• Familiarity with FDA and other countries Regulatory bodies on Cybersecurity guidelines for medical devices and corporate enterprise network.
• Familiarity with design of diagnostic medical devices is a plus.
• Understanding industry standards such as the NIST Cybersecurity Framework, FedRAMP, RMF, TIR-57 Principles for medical device security risk management, etc.

Preferred Qualifications

• Previous work experience in a Product role.
• Previous work experience in a regulated environment.
• Experience with medical device certifications from government agencies is preferred.
• Certifications such as CISA, CISM, CRISC, CISSP, CPP or CFE are preferred.
• Knowledge of the latest methodologies for enterprise and product cybersecurity risk assessment and vulnerability management and technologies and tools used within the security domain is desired.
• Effective Communication skills and collaboration skills.

Apply Now

The base pay for this position is $149,300.00 – $298,700.00. In specific locations, the pay range may vary from the range posted.

Abbott is an Equal Opportunity Employer, committed to employee diversity.