Director Product Cybersecurity

Overview

Abbott is a global healthcare leader with technologies spanning diagnostics, medical devices, nutritionals and branded generic medicines. Our 115,000 colleagues serve people in more than 160 countries.

At Abbott, you can do work that matters, grow, and learn, care for yourself and your family, be your true self, and live a full life. You’ll also have access to:

• Career development with an international company where you can grow the career you dream of.
• Eligibility for medical coverage in our Health Investment Plan (HIP) PPO medical plan in the next calendar year.
• An excellent retirement savings plan with a high employer contribution.
• Tuition reimbursement, the Freedom 2 Save student debt program, and FreeU education benefit – an affordable and convenient path to getting a bachelor’s degree.
• A company recognized as a great place to work in dozens of countries worldwide and named one of the most admired companies in the world by Fortune.
• A company recognized as one of the best big companies to work for as well as the best place to work for diversity, working mothers, female executives, and scientists.

The Director, Product Cybersecurity reports to the Enterprise and Product Cybersecurity Director. The Product Cybersecurity role is responsible for assisting and ensuring Abbott products are safe and secure and for building products that are compliant with industry regulation and meet customer and patient security expectations. The Product Cybersecurity role will be a key point of contact for Core Dx division. This candidate will be responsible for:

• Divisional cybersecurity process Subject Matter Expert (SME) for multiple Abbott Organizations and Process Owner.
• Cybersecurity for medical and non-medical products.
• Cybersecurity Product Inventory.
• Cybersecurity risk and vulnerability management and process.
• Identification of cybersecurity requirements for suppliers and distributors.
• Providing cybersecurity input to internal and external communications.
• Conducting cybersecurity incident response tabletop exercises.
• Conducting cybersecurity oversight committee meetings to inform executive leadership of cybersecurity initiatives, goals, and areas of interest.
• Assessment of cybersecurity regulations for impact to Core Dx products.

• Maintain divisional compliance with applicable corporate and divisional policies and procedures including training.
• Maintain divisional compliance with applicable US and international regulations, gathering cross-functional expertise when needed.
• Collaborate with division cross-functional teams to develop and maintain product cybersecurity risk management and vulnerability management processes and procedures and create and maintain a Secure Product Lifecycle process.
• Lead and support product teams with product cybersecurity to include risk assessments, threat modeling, vulnerability management, cybersecurity deliverables and mitigation plans.
• Provide process and technical support for commercial deployments of products worldwide, including restricted environments (e.g., China, Russia), ensuring compliance with regional cybersecurity and data protection requirements.
• Build and maintain relationships with internal stakeholders, external partners, and customers to enable successful execution of the division product and enterprise cybersecurity program.
• Serve as a trusted advisor and effectively communicate cybersecurity risks with technical and non-technical internal and external stakeholders, including senior leadership.
• Ensure that user communities understand and adhere to necessary procedures to maintain security.
• May require familiarity with identity and access management (IAM), domain structures, user authentication mechanisms, network security controls, including firewalls, intrusion detection/prevention systems (IDS/IPS), secure network architecture, internet protocols and digital certificate/signing solutions.
• Balance business objectives with cybersecurity risks by providing risk-based recommendations and clearly articulating trade-offs to leadership for informed decision-making.
• Lead, mentor, and develop cybersecurity professionals,…