Senior Cybersecurity Specialist

At Abbott, you can do work that matters, grow, and learn, care for yourself and your family, be your true self, and live a full life. You’ll also have access to:

• Career development with an international company where you can grow the career you dream of.
• Employees can qualify for free medical coverage in our Health Investment Plan (HIP) PPO medical plan in the next calendar year.
• An excellent retirement savings plan with a high employer contribution
• Tuition reimbursement, the Freedom 2 Save student debt program, and FreeU education benefit - an affordable and convenient path to getting a bachelor’s degree.
• A company recognized as a great place to work in dozens of countries worldwide and named one of the most admired companies in the world by Fortune.
• A company that is recognized as one of the best big companies to work for as well as the best place to work for diversity, working mothers, female executives, and scientists.

The Senior Cybersecurity Specialist reports to the Cybersecurity Architect Director.  The Senior Specialist role is responsible for assisting and ensuring Abbott Enterprise is safe and secure to build products that are compliant with industry regulation and meet customer and patient security expectations. The Senior Specialist role will be a key point of contact for Core Dx division. This candidate will be responsible for:

• Cybersecurity for security of medical and non-medical products and non-product
• Cybersecurity Vulnerability Management
• Cybersecurity Applications and Cryptography
• Cybersecurity Application Infrastructure (e.g. Servers, Database, Disaster Recovery)
• Cybersecurity Application Program Lead
• Cybersecurity Governance Risk and Compliance
• Cybersecurity Vendor Engagement

• Lead cybersecurity projects from initiation through completion, including Project Planning, Scope definition, Timeline, Budget and Risk tracking.
• Manage and track Core Diagnostics cybersecurity applications including new requirements/requests, bug fixes, enhancements and administration.
• Participate in early project phases (including Phase 0 / discovery) to define security requirements.
• Review and contribute to Statements of Work (SOWs), ensuring security expectations are clearly defined.
• Conduct and support penetration testing and disaster recovery activities, including coordination with third-party vendors and internal remediation teams.
• Lead and execute risk assessments across systems, applications, and cloud environments.
• Assist with Cybersecurity audit preparation and participate in Cybersecurity audits.
• Manage and review security exception processes, including System exceptions, Cloud security exceptions, and USB/device control exceptions.
• Support documenting cryptography processes.
• Work on Cybersecurity requests (CSR’s) that come in from customers and vendors.

BA/BS in Business, Engineering, Computer Science, or related disciplines. Master’s degree is desirable.

• Overall 10+ years’ experience with 5+ years of experience working in Cybersecurity, Software Development, or Engineering.
• Strong understanding of Customers, Vendors, Product Cybersecurity and the relationship between threat, vulnerability and potential customer risk in the context of risk management.
• Expertise with Identity and Access Management (IAM) and Server infrastructure.

• Certifications such as Security+, CC, CISSP, CISA, CISM, CRISC, CPP, or CFE are preferred.
• Familiarity with exception management, project management, and cybersecurity concepts.
• Knowledge of the latest methodologies for enterprise and product cybersecurity risk assessment and vulnerability management and technologies and tools used within the security domain is desired.
• Familiarity with Public Key Infrastructure (PKI) and cryptography.
• Familiarity with ISO 27001, and other Cybersecurity audit certifications.
• Effective communication skills and collaboration skills.