Director Product Cybersecurity

Abbott • Irving, TX

1d • Hybrid

About The Position

The Director, Product Cybersecurity reports to the Enterprise and Product Cybersecurity Director. The Product Cybersecurity role is responsible for assisting and ensuring Abbott Products are safe and secure and to build products that are compliant with industry regulation and meet customer and patient security expectations. The Product Cybersecurity role will be a key point of contact for CoreDx division. This candidate will be responsible for:
Divisional cybersecurity process
Subject Matter Expert (SME) for multiple Abbott Organizations and Process Owner
Cybersecurity for Medical and Non-medical products
Cybersecurity Product Inventory
Cybersecurity Risk and Vulnerability Management and Process
Identification of Cybersecurity requirements for Suppliers and Distributors
Providing Cybersecurity input to internal and external communications
Conducting Cybersecurity Incident Response Tabletop Exercises
Conducting Cybersecurity Oversight Committee Meetings to inform Executive Leadership of Cybersecurity Initiatives, Goals, and areas of interest.
Assessment of Cybersecurity regulations for impact to CoreDx products

What You’ll Work On
Maintain divisional compliance with applicable Corporate and Divisional Policies and procedures including training. Maintain divisional compliance with applicable US and International Regulations, gathering cross-functional expertise when needed. Collaborate with division cross-functional teams to develop and maintain product cybersecurity risk management and vulnerability management processes and procedures and create and maintain a Secure Product Lifecycle process. Lead and support product teams with product cybersecurity to include risk assessments, threat modeling, vulnerability management, cybersecurity deliverables and mitigation plans. Process and technical support for commercial deployments of products worldwide to include into restricted (e.g. China, Russia) environments, ensuring compliance with regional cybersecurity and data protection requirements. Build and maintain relationships with internal stakeholders, external partners, and customers to enable successful execution of the division product and enterprise cybersecurity program. Serve as a trusted advisor and effectively communicate cybersecurity risks with technical and non-technical internal and external stakeholders, including senior leadership. Ensures that user community understands and adheres to necessary procedures to maintain security. May require familiarity with identity and access management (IAM), domain structures, user authentication mechanisms, network security controls, including firewalls, intrusion detection/prevention systems (IDS/IPS), secure network architecture, internet protocols and digital certificate/signing solutions. Balance business objectives with cybersecurity risks by providing risk-based recommendations and clearly articulating trade-offs to leadership for informed decision-making. Lead, mentor, and develop cybersecurity professionals, providing coaching, technical guidance, and career development support across the team.

Requirements

• BA/BS in Business, Engineering, Computer Science, or related disciplines.
• Overall 10+ years’ experience with 5+ years of experience working in Engineering, Cyber support, or Product support.
• Strong understanding of Customers, Product Cybersecurity and the relationship between threat, vulnerability and potential customer risk in the context of risk management.
• Understanding medical product safety risk and the relationship with product Cybersecurity risk
• Familiarity with FDA and other countries Regulatory bodies on Cybersecurity guidelines for medical devices and corporate enterprise network
• May require familiarity with identity and access management (IAM), domain structures, user authentication mechanisms, network security controls, including firewalls, intrusion detection/prevention systems (IDS/IPS), secure network architecture, internet protocols and digital certificate/signing solutions.

Nice To Haves

• Master’s degree is desirable.
• Understanding industry standards such as the NIST Cybersecurity Framework, FedRAMP, RMF, TIR-57 Principles for medical device security risk management, etc.
• Previous work experience in a Product role
• Previous work experience in a regulated environment
• Experience with medical device certifications from government agencies is preferred
• Certifications such as CISA, CISM, CRISC, CISSP, CPP or CFE are preferred
• Knowledge of the latest methodologies for enterprise and product cybersecurity risk assessment and vulnerability management and technologies and tools used within the security domain is desired
• Effective Communication skills and collaboration skills.
• Familiarity with design of diagnostic medical devices is a plus

Responsibilities

• Divisional cybersecurity process
• Subject Matter Expert (SME) for multiple Abbott Organizations and Process Owner
• Cybersecurity for Medical and Non-medical products
• Cybersecurity Product Inventory
• Cybersecurity Risk and Vulnerability Management and Process
• Identification of Cybersecurity requirements for Suppliers and Distributors
• Providing Cybersecurity input to internal and external communications
• Conducting Cybersecurity Incident Response Tabletop Exercises
• Conducting Cybersecurity Oversight Committee Meetings to inform Executive Leadership of Cybersecurity Initiatives, Goals, and areas of interest.
• Assessment of Cybersecurity regulations for impact to CoreDx products
• Maintain divisional compliance with applicable Corporate and Divisional Policies and procedures including training.
• Maintain divisional compliance with applicable US and International Regulations, gathering cross-functional expertise when needed.
• Collaborate with division cross-functional teams to develop and maintain product cybersecurity risk management and vulnerability management processes and procedures and create and maintain a Secure Product Lifecycle process.
• Lead and support product teams with product cybersecurity to include risk assessments, threat modeling, vulnerability management, cybersecurity deliverables and mitigation plans.
• Process and technical support for commercial deployments of products worldwide to include into restricted (e.g. China, Russia) environments, ensuring compliance with regional cybersecurity and data protection requirements.
• Build and maintain relationships with internal stakeholders, external partners, and customers to enable successful execution of the division product and enterprise cybersecurity program.
• Serve as a trusted advisor and effectively communicate cybersecurity risks with technical and non-technical internal and external stakeholders, including senior leadership.
• Ensures that user community understands and adheres to necessary procedures to maintain security.
• Balance business objectives with cybersecurity risks by providing risk-based recommendations and clearly articulating trade-offs to leadership for informed decision-making.
• Lead, mentor, and develop cybersecurity professionals, providing coaching, technical guidance, and career development support across the team.

Benefits

• Employees can qualify for free medical coverage in our Health Investment Plan (HIP) PPO medical plan in the next calendar year.
• An excellent retirement savings plan with a high employer contribution
• Tuition reimbursement, the Freedom 2 Save student debt program, and FreeU education benefit - an affordable and convenient path to getting a bachelor’s degree.

What This Job Offers

• Job Type: Full-time
• Career Level: Director