Senior Manager-Cybersecurity

The Opportunity

The Senior Manager, Cybersecurity is responsible for supporting the development strategies to identify, assess, and mitigate cybersecurity and product risks across Abbott's products, manufacturing environments, and enterprise operations. This includes product vulnerabilities, patient safety risks, data protection, operational technology (OT) risks, and enterprise security threats. The role supports the divisional cybersecurity program in risk assessments, security testing, incident response, compliance activities, metrics and monitoring, and cybersecurity awareness. The Senior Manager works closely with the Division Cybersecurity leader supporting R&D, Quality, Manufacturing, IT, and Corporate Cybersecurity teams and is responsible for developing and mentoring cybersecurity professionals. This is an onsite role at an Abbott location in Lake Forest/Chicago, IL. This is NOT a remote role/opportunity.

What You'll Do

Product Security

• Support the development and execution of divisional product cybersecurity strategy and roadmap.
• Partner with R&D and Quality teams to ensure secure product development lifecycle (Secure SDLC) practices are present throughout product development.
• Provide guidance and support product security risk assessments, threat modeling, security testing, and mitigation planning.
• Lead product cybersecurity compliance efforts supporting FDA requirements, ISO 27001, SOC 2, and other applicable standards.
• Support post-market vulnerability management processes, including vulnerability assessment, impact analysis, remediation planning, and coordinated disclosure activities.
• Lead customer cybersecurity assessments and responses to product security inquiries.
• Support cybersecurity incident response and tabletop exercises involving connected products and medical devices.

Enterprise and Manufacturing Security

• Collaborate with IT, Infrastructure, and Cybersecurity teams to assess enterprise security risks and drive remediation plans.
• Provide oversight and guidance for identity and access management, network security, vulnerability management, and cybersecurity governance activities.
• Support enterprise cybersecurity risk assessments and business impact analyses.
• Provide input on cybersecurity risks, priorities, and mitigation strategies to divisional leadership and governance committees.
• Support the maturity of cybersecurity programs across manufacturing, laboratory, and information technology environments.
• Support cybersecurity risk assessments and security improvement initiatives across manufacturing environments, including production systems, industrial control systems, automation technologies, and connected operational assets.
• Drive cybersecurity controls, incident response preparedness, and business continuity capabilities to protect critical manufacturing and enterprise processes.
• Collaborate with site leadership to ensure compliance with corporate OT security standards.

Education and Experience You'll Bring

Required Qualifications

• BA/BS or higher in Information Security, Risk or IT Management, Computer Science, or related field; or equivalent experience.
• 10 - 12 years of Cybersecurity experience
• 5+ years leading cybersecurity teams, programs, or strategic initiatives.
• Solid understanding of product security and the relationship between threat, vulnerability and potential customer risk in the context of risk management
• Familiarity with FDA cybersecurity guidance for medical devices and connected healthcare products.
• Knowledge of national and international regulatory compliances and frameworks such as NIST Cybersecurity Framework, ISO 27001, EU DPD, HIPAA/HITECH
• Should hold at least one relevant professional certification, such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Security Professional (CISSP), Certified Protection Professional (CPP), or Certified Fraud Examiner (CFE).

Preferred Qualifications

Requires strong analytical skills, business intelligence, effective communication, interpersonal skills, organizational intelligence, relationship management, the ability to make meaningful decisions based on sound judgement, and the ability to work effectively with a variety of roles from Executive Management to Security Analysts.