Senior Manager-Cybersecurity

Abbott • Lake Forest, IL

1d • $129,300 - $258,700 • Onsite

About The Position

The Senior Manager, Cybersecurity supports the development of strategies to identify, assess, and mitigate cybersecurity and product risks across Abbott’s products, manufacturing environments, and enterprise operations. The role addresses product vulnerabilities, patient safety risks, data protection, operational technology (OT) risks, and enterprise security threats. It supports the divisional cybersecurity program through risk assessments, security testing, incident response, compliance activities, metrics and monitoring, and cybersecurity awareness. The Senior Manager works with the Division Cybersecurity leader and supports R&D, Quality, Manufacturing, IT, and Corporate Cybersecurity teams, while developing and mentoring cybersecurity professionals.

The position supports divisional product cybersecurity strategy and roadmap, secure product development, product security assessments and compliance, and post-market vulnerability management. It also collaborates with enterprise IT, infrastructure, and cybersecurity teams on risk, governance, security controls, and remediation. For manufacturing and laboratory environments, the role supports OT security assessments and initiatives, control implementation, incident response preparedness, business continuity, and compliance with corporate OT security standards.

This is an onsite role at Abbott locations in Lake Forest or Chicago, Illinois, and is not remote. Travel is 10% of the time. The base pay range is $129,300.00–$258,700.00, with variation possible in specific locations.

Requirements

• BA/BS or higher in Information Security, Risk or IT Management, Computer Science, or a related field, or equivalent experience.
• 10–12 years of cybersecurity experience.
• At least 5 years leading cybersecurity teams, programs, or strategic initiatives.
• Solid understanding of product security and the relationship between threats, vulnerabilities, and potential customer risk in the context of risk management.
• Familiarity with FDA cybersecurity guidance for medical devices and connected healthcare products.
• Knowledge of national and international regulatory compliance and frameworks such as NIST Cybersecurity Framework, ISO 27001, EU DPD, and HIPAA/HITECH.
• At least one relevant professional certification, such as CISA, CISM, CRISC, CISSP, CPP, or CFE.

Nice To Haves

• Strong analytical skills, business intelligence, effective communication and interpersonal skills, organizational intelligence, and relationship management.
• Ability to make meaningful decisions based on sound judgment and work effectively with roles ranging from Executive Management to Security Analysts.

Responsibilities

• Support the development and execution of divisional product cybersecurity strategy and roadmap.
• Partner with R&D and Quality teams to ensure secure product development lifecycle practices are present throughout product development.
• Provide guidance and support for product security risk assessments, threat modeling, security testing, and mitigation planning.
• Lead product cybersecurity compliance efforts supporting FDA requirements, ISO 27001, SOC 2, and other applicable standards.
• Support post-market vulnerability management, including vulnerability assessment, impact analysis, remediation planning, and coordinated disclosure activities.
• Lead customer cybersecurity assessments and respond to product security inquiries.
• Support cybersecurity incident response and tabletop exercises involving connected products and medical devices.
• Collaborate with IT, Infrastructure, and Cybersecurity teams to assess enterprise security risks and drive remediation plans.
• Provide oversight and guidance for identity and access management, network security, vulnerability management, and cybersecurity governance activities.
• Support enterprise cybersecurity risk assessments and business impact analyses.
• Provide input on cybersecurity risks, priorities, and mitigation strategies to divisional leadership and governance committees.
• Support the maturity of cybersecurity programs across manufacturing, laboratory, and information technology environments.
• Support cybersecurity risk assessments and security improvement initiatives across manufacturing environments, including production systems, industrial control systems, automation technologies, and connected operational assets.
• Drive cybersecurity controls, incident response preparedness, and business continuity capabilities to protect critical manufacturing and enterprise processes.
• Collaborate with site leadership to ensure compliance with corporate OT security standards.
• Develop and mentor cybersecurity professionals.

Benefits

• Career development with an international company.
• Employees may qualify for free medical coverage in the Health Investment Plan (HIP) PPO medical plan in the next calendar year.
• Retirement savings plan with a high employer contribution.
• Tuition reimbursement.
• Freedom 2 Save student debt program.
• FreeU education benefit, described as an affordable and convenient path to earning a bachelor’s degree.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior