Director Product Cybersecurity

Overview

Abbott is a global healthcare leader with technologies spanning diagnostics, medical devices, nutritionals and branded generic medicines. Our 115,000 colleagues serve people in more than 160 countries.

Working at Abbott

At Abbott, you can do work that matters, grow, and learn, care for yourself and your family, be your true self, and live a full life. You’ll also have access to:

• Career development with an international company where you can grow the career you dream of.
• Eligibility for medical coverage in our Health Investment Plan (HIP) PPO medical plan in the next calendar year.
• An excellent retirement savings plan with a high employer contribution.
• Tuition reimbursement, the Freedom 2 Save student debt program, and FreeU education benefit – an affordable and convenient path to getting a bachelor’s degree.
• A company recognized as a great place to work in dozens of countries worldwide and named one of the most admired companies in the world by Fortune.
• A company recognized as one of the best big companies to work for as well as the best place to work for diversity, working mothers, female executives, and scientists.

The Opportunity

The Director, Product Cybersecurity reports to the Enterprise and Product Cybersecurity Director. The Product Cybersecurity role is responsible for assisting and ensuring Abbott products are safe and secure and for building products that are compliant with industry regulation and meet customer and patient security expectations. The Product Cybersecurity role will be a key point of contact for CoreDx division. This candidate will be responsible for:

• Divisional cybersecurity process Subject Matter Expert (SME) for multiple Abbott Organizations and Process Owner.
• Cybersecurity for medical and non-medical products.
• Cybersecurity Product Inventory.
• Cybersecurity risk and vulnerability management and process.
• Identification of cybersecurity requirements for suppliers and distributors.
• Providing cybersecurity input to internal and external communications.
• Conducting cybersecurity incident response tabletop exercises.
• Conducting cybersecurity oversight committee meetings to inform executive leadership of cybersecurity initiatives, goals, and areas of interest.
• Assessment of cybersecurity regulations for impact to CoreDx products.

What You’ll Work On

• Maintain divisional compliance with applicable corporate and divisional policies and procedures including training.
• Maintain divisional compliance with applicable US and international regulations, gathering cross-functional expertise when needed.
• Collaborate with division cross-functional teams to develop and maintain product cybersecurity risk management and vulnerability management processes and procedures and create and maintain a Secure Product Lifecycle process.
• Lead and support product teams with product cybersecurity to include risk assessments, threat modeling, vulnerability management, cybersecurity deliverables and mitigation plans.
• Provide process and technical support for commercial deployments of products worldwide, including restricted environments (e.g., China, Russia), ensuring compliance with regional cybersecurity and data protection requirements.
• Build and maintain relationships with internal stakeholders, external partners, and customers to enable successful execution of the division product and enterprise cybersecurity program.
• Serve as a trusted advisor and effectively communicate cybersecurity risks with technical and non-technical internal and external stakeholders, including senior leadership.
• Ensure that user communities understand and adhere to necessary procedures to maintain security.
• May require familiarity with identity and access management (IAM), domain structures, user authentication mechanisms, network security controls, including firewalls, intrusion detection/prevention systems (IDS/IPS), secure network architecture, internet protocols and digital certificate/signing solutions.
• Balance business objectives with cybersecurity risks by providing risk-based recommendations and clearly articulating trade-offs to leadership for informed decision-making.
• Lead, mentor, and develop cybersecurity professionals, providing coaching, technical guidance, and career development support across the team.

Required Qualifications

• BA/BS in Business, Engineering, Computer Science, or related disciplines. Master’s degree is desirable.
• Overall 10+ years’ experience with 5+ years of experience working in engineering, cyber support, or product support.
• Strong understanding of customers, product cybersecurity and the relationship between threat, vulnerability and potential customer risk in the context of risk management.
• Understanding medical product safety risk and the relationship with product cybersecurity risk.
• Familiarity with FDA and other regulatory bodies on cybersecurity guidelines for medical devices and corporate enterprise networks.
• Familiarity with the design of diagnostic medical devices is a plus.
• Understanding industry standards such as the NIST Cybersecurity Framework, FedRAMP, RMF, TIR-57 Principles for medical device security risk management .

Preferred Qualifications

• Previous work experience in a product role.
• Previous work experience in a regulated environment.
• Experience with medical device certifications from government agencies is preferred.
• Certifications such as CISA, CISM, CRISC, CISSP, CPP or CFE are preferred.
• Knowledge of the latest methodologies for enterprise and product cybersecurity risk assessment and vulnerability management and technologies and tools used within the security domain is desired.
• Effective communication and collaboration skills.

Benefits

For information on health and wellness benefits, please refer to the company resources.

The base pay for this position is $149,300.00 – $298,700.00. In specific locations, the pay range may vary from the range posted.