Senior Manager – Enterprise Cybersecurity

Responsibilities

• Cybersecurity for Enterprise across Manufacturing, Distribution, Non-Product, Medical and Non-medical products.
• Cybersecurity Asset Inventory.
• Cybersecurity Risk Management and Process.
• Cybersecurity Vulnerability Management.
• Cybersecurity Communication.
• Cybersecurity Incident Response.
• Cybersecurity Tabletops.
• Cybersecurity Oversight Committee.
• Cybersecurity risk management and process Subject Matter Expert (SME) for multiple Abbott Organizations.
• Maintain divisional compliance with applicable Corporate and Divisional Policies and procedures including training.
• Collaborate with division cross-functional teams to develop and maintain enterprise and product cybersecurity risk management and vulnerability management processes and procedures.
• Lead and support Divisions with enterprise, product, and manufacturing cybersecurity to include risk assessments, threat modeling, and mitigation plans.
• Collaborate with division functional teams to develop and maintain operational procedures for the assessment of Manufacturing and Distribution cybersecurity programs.
• Process and technical support for commercial deployments of products worldwide to include into restricted (e.g. China, Russia) environments, ensuring compliance with regional cybersecurity and data protection requirements.
• Build and maintain relationships with internal stakeholders, external partners, and customers to enable successful execution of the division product and enterprise cybersecurity program.
• Serve as a trusted advisor and effectively communicate cybersecurity risks with technical and non-technical internal and external stakeholders, including senior leadership.
• Ensures that user community understands and adheres to necessary procedures to maintain security.
• Maintain working knowledge and oversight of network security controls, including firewalls, intrusion detection/prevention systems (IDS/IPS), secure network architecture, and internet protocols.
• Balance business objectives with cybersecurity risks by providing risk-based recommendations and clearly articulating trade-offs to leadership for informed decision-making.
• Lead, mentor, and develop cybersecurity professionals, providing coaching, technical guidance, and career development support across the team.

• Overall 10+ years’ experience with 5+ years of experience working in Engineering or Cyber support.
• Strong understanding of Enterprise Cybersecurity and the relationship between threat, vulnerability and potential customer risk in the context of risk management.
• Previous work experience in an Enterprise Cybersecurity role is preferred.
• Understanding medical product safety risk and the relationship with product Cybersecurity risk.
• Familiarity with FDA and other countries Regulatory bodies on Cybersecurity guidelines for medical devices and corporate enterprise network.
• Familiarity with design of enterprise networks and diagnostic medical devices is a plus.
• Understanding industry standards such as the NIST Cybersecurity Framework, FedRAMP, RMF, TIR-57 Principles for medical device security risk management, etc.
• Experience with medical device certifications from government agencies is preferred.
• Certifications such as CISA, CISM, CRISC, CISSP, CPP or CFE are preferred.
• Knowledge of the latest methodologies for enterprise and product cybersecurity risk assessment and vulnerability management and technologies and tools used within the security domain is desired.
• Effective Communication skills and collaboration skills.

• Cybersecurity Risk Management
• Cybersecurity Vulnerability Management
• Risk Assessments
• Threat Modeling

• Network Security Controls
• Firewalls
• Intrusion Detection/Prevention Systems
• Secure Network Architecture
• Cybersecurity Incident Response
• Cybersecurity Asset Inventory

• Effective Communication
• Collaboration
• Leadership
• Mentoring
• Coaching
• Technical Guidance
• Relationship Building
• Decision-Making
• Organizational Skills
• Interpersonal Skills

• CISA
• CISM
• CRISC
• CISSP
• CPP
• CFE