Senior Cybersecurity Risk Remediation Analyst

Position Overview

At Abbott Cancer Diagnostics, we are cancer fighters. We are united by our mission to change lives by providing earlier, smarter answers. Through advances in cancer detection and treatment guidance, we will help eradicate the disease and the suffering it causes. Cancer Diagnostics' Cybersecurity organization supports this mission by defending the millions of digital patient, practitioner, and employee lives within our environments.

Defending today and securing tomorrow is no small feat.
To help achieve this, the team is in search of a cybersecurity risk management subject matter expert to join our collaborative team comprised of passionate experts.

The Senior Cybersecurity Risk Remediation Analyst, reports to the Director of Cybersecurity Strategy & GRC. This role serves as the central coordination point for enterprise cybersecurity remediation efforts arising from risk assessments, vulnerability management, penetration testing, compliance activities, security incidents, audits, and other cybersecurity assurance functions. This role requires a deep understanding of security and IT risk principles, processes, and practices, combined with the ability to integrate security into business operations.

Success in this role will be measured by the ability to drive cybersecurity risks to resolution through effective coordination, stakeholder engagement, and sustained remediation efforts.

This role requires regular onsite work in Madison, WI.

• Partner with technical teams and risk owners to coordinate remediation of cybersecurity findings across multiple domains, including vulnerability management, penetration testing, compliance assessments, security incidents, and other risk management activities. Work collaboratively with technical stakeholders to evaluate remediation options, challenge assumptions where appropriate, monitor progress, and drive timely closure of remediation efforts.
• Maintain visibility into enterprise cybersecurity risks by ensuring remediation activities, milestones, and status updates are accurately tracked and communicated.
• Translate cybersecurity findings into actionable remediation plans with defined owners, milestones, and measurable outcomes.
• Aggregate, evaluate, and report on cybersecurity risks and remediation progress to support management and leadership decision-making.
• Build trusted relationships with stakeholders to facilitate remediation planning, remove obstacles, and drive timely risk treatment activities.
• Support the delivery of risk management education by preparing materials, reinforcing frameworks, and responding to stakeholder questions.
• Identify remediation barriers, facilitate decision-making with stakeholders, and elevate risks that threaten remediation timelines or business objectives.
• Partner with leadership to prioritize cybersecurity remediation initiatives based on business risk, strategic objectives, and organizational capacity.
• Act as a resource providing training, guidance, and mentoring to less experienced staff.
• Collaborate with stakeholders to remove roadblocks, coordinate cross‑functional remediation efforts, and improve the organization's overall security posture.
• Drive accountability for cybersecurity remediation by following up with risk owners, monitoring milestones, escalating delays, and ensuring remediation efforts remain on track through completion.
• Uphold company mission and values through accountability, innovation, integrity, quality, and teamwork.
• Support and comply with the company's Quality Management System policies and procedures.
• Maintain regular and reliable attendance.
• Act with an inclusion mindset and model these behaviors for the organization.
• Travel 10% of working time away from the work location, which may include overnight or weekend travel.

• Bachelor’s Degree in a field related to essential duties; or Associate Degree and 2 years of relevant experience; or High School Diploma or General Education Degree (GED) and 4 years of relevant experience.
• 6+ years of professional experience in a cybersecurity or IT governance, risk, compliance, or operations role.
• 1+ years of experience with cybersecurity risk management.
• Demonstrated experience with security risk management and compliance frameworks (e.g., NIST, ISO, HIPAA).
• Experience evaluating risk rating methodologies to appropriately convey the enterprise cybersecurity posture.