Cybersecurity Manager

• Serve as a cybersecurity advisor and strategic partner to business and technology leadership
• Align business objectives with enterprise cybersecurity strategy
• Integrate security, privacy, and regulatory requirements into business decisions, product development, and technology initiatives
• Lead risk-based decision-making and facilitate stakeholder engagement
• Prioritize cybersecurity investments while protecting Abbott’s assets, products, data, and patients
• Guide business units, operations teams, application development teams, and third-party vendors in achieving program requirements
• Support development of cybersecurity strategies, policies, and standards
• Attend project and implementation meetings as the cybersecurity subject matter expert
• Monitor current and proposed cybersecurity changes affecting regulatory, privacy, and security best practices
• Contribute to a risk-based cybersecurity program aligned with regulatory requirements and industry practices
• Collaborate with cross-functional teams to ensure compliance with laws, regulations, and policies across Abbott’s jurisdictions
• Contribute to cybersecurity toolset design for automated vulnerability discovery, remediation, and alerting
• Apply familiarity with AI governance, data governance, and emerging technology risk management

• 10–12 years of experience required, with demonstrable mastery of at least two security domains
• Bachelor’s degree in Information Security, Computer Science, or related field, or equivalent experience
• Knowledge of General Computer Controls, including Information Security, Information System Operations, Vendor Management, Business Continuity, Networks, Database, System Software, Hardware, and Application Development controls
• Expertise in NIST cybersecurity framework, ISO 27001/2, SOC2, HITRUST, and FedRAMP information security standards
• CISM Certification (or similar)
• Familiarity with national and international regulatory compliance and frameworks including NIST, ISO, SOX, GDPR, HIPPA, and FDA
• Understanding of OWASP, CVSS, and the MITRE ATT&CK framework
• Strong communication, organizational, critical attention to detail, and multitasking skills
• Ability to communicate regulatory requirements, security objectives, policies, and standards in business terms
• Preferred:
  Medical device and manufacturing cybersecurity experience
• Preferred:
  Ability to balance cybersecurity requirements with business objectives and product delivery timelines
• Preferred:
  Audit and Risk Management experience

Demonstrates expertise in cybersecurity strategy, regulatory compliance, and risk management, with a strong focus on aligning business objectives with security initiatives. Proficient in leading cross-functional teams and communicating complex security concepts in business terms.

• NIST Cybersecurity Framework
• ISO 27001/2
• CISM Certification
• Regulatory Compliance
• Risk Management

• Information Security
• Vendor Management
• Business Continuity
• Network Security
• Database Security
• Application Development Controls
• OWASP
• CVSS
• MITRE ATT&CK Framework
• Cybersecurity Strategy Development

• Strong Communication
• Organizational Skills
• Attention to Detail
• Multitasking

• CISM Certification

• General Computer Controls
• HITRUST
• FedRAMP
• SOX
• GDPR
• HIPAA
• Medical Device Cybersecurity
• Manufacturing Cybersecurity

• Cybersecurity Toolset Design
• Automated Vulnerability Discovery
• Remediation
• Alerting