Cybersecurity Specialist

Cybersecurity Specialist

Abbott is a global healthcare leader that helps people live more fully at all stages of life. Our portfolio of life-changing technologies spans the spectrum of healthcare, with leading businesses and products in diagnostics, medical devices, nutritionals and branded generic medicines. Our 115,000 colleagues serve people in more than 160 countries.

We're focused on helping people with diabetes manage their health with life-changing products that provide accurate data to drive better-informed decisions. We're revolutionizing the way people monitor their glucose levels with our new sensing technology.

The Cybersecurity Specialist is responsible for assisting and identifying potential security risks, vulnerabilities, and threats to execute mitigation and remediation strategies/processes that ensure Abbott builds safe and secure products that are compliant with industry cybersecurity regulation and meet customer and patient security expectations.

What You'll Do:

• Develop and implement cybersecurity deliverables for product software releases and provide technical security responses to customer inquiries.
• Support the protection of manufacturing assets through implementation of security controls, vulnerability assessments, risk evaluations, and mitigation activities.
• Evaluate the cybersecurity posture of third-party vendors and suppliers providing components or services for products.
• Provide project updates, review policies, track compliance activities, coordinate cybersecurity initiatives, and support internal and external audits.
• Work with development operations and teams to develop and implement monitoring and security solutions in stand-alone and embedded product software and supporting applications. Conduct comprehensive software assessments to identify potential security risks and vulnerabilities.
• Support the security of applications and computing assets across public, private, and hybrid cloud environments.
• Protect applications in compliance with multiple global privacy, security, business resiliency and compliance frameworks.
• Support security system administration activities, assist with security configuration reviews, and help implement solutions to reduce risk.
• Participate in incident breach and response activities for product and supporting applications.
• Support the advancement of cyber threat and vulnerability management program to ensure consistent identification, analysis, response, and monitoring of cyber security threats, events, and vulnerabilities.
• Participate in cross-functional team coordination to achieve defined security goals as well as meet technical requirements in support of detailed implementation plans for security projects.
• Provide technical advice and training about potential security risks and prevention strategies.
• Develop security content for monthly site security metrics reporting on the efficacy and efficiency of security program deployment at the site, based on global metrics & reporting standards.
• Assist in the completion of Secure Lifecycle Process (SLP) cybersecurity assessments and threat modeling, ensuring compliance with industry standards and identifying potential security vulnerabilities throughout the software development lifecycle.

Qualifications:

• Bachelor's degree in Computer Science, Information Systems, Engineering, Cybersecurity, or a related field.
• Minimum 5 years of relevant professional experience, including at least 2 years of experience in cybersecurity, information security, software security, IT, engineering, or a related discipline
• Demonstrated knowledge of cybersecurity frameworks and standards such as NIST, ISO 27001, IEC 62304, and Purdue Enterprise Reference Architecture (PERA).
• Understanding of product safety risk and relationship with product cybersecurity risk.
• Familiarity with secure software development lifecycle (SSDLC), vulnerability management, threat modeling, and cybersecurity best practices.
• Ability to manage multiple priorities with strong organizational and time-management skills.
• Demonstrated critical thinking, analytical skills, judgment, and logic for problem-solving and decision-making in an environment with changing priorities.
• Ability to work effectively in a team environment, adapting to rapidly changing business and technological needs.
• Excellent documentation, communication and interpersonal skills.

Preferred Qualifications:

• One or more industry-recognized cybersecurity certifications such as CISSP, CISM, CEH, Security+, GSEC, or equivalent are preferred.
• Experience or exposure to product security, medical device security, cloud security, or secure software development is preferred.

The base pay for this position is $78,000.00 – $156,000.00. In specific locations, the pay range may vary from the range posted.