Cybersecurity Specialist

JOB DESCRIPTION:

We’re focused on helping people with diabetes manage their health with life-changing products that provide accurate data to drive better-informed decisions. We’re revolutionizing the way people monitor their glucose levels with our new sensing technology.

Working at Abbott

At Abbott, you can do work that matters, grow, and learn, care for yourself and family, be your true self and live a full life. You’ll also have access to:

• Career development with an international company where you can grow the career you dream of.
• Employees can qualify for free medical coverage in our Health Investment Plan (HIP) PPO medical plan in the next calendar year
• An excellent retirement savings plan with high employer contribution
• Tuition reimbursement, the [Freedom 2 Save](https://www.abbott.com/corpnewsroom/strategy-and-strength/tackling-student-debt-for-our-employees.html) student debt program and [FreeU](https://www.abbott.com/corpnewsroom/strategy-and-strength/college-degree-for-free-its-possible-with-freeu.html) education benefit - an affordable and convenient path to getting a bachelor’s degree.
• A company recognized as a great place to work in dozens of countries around the world and named one of the most admired companies in the world by Fortune.
• A company that is recognized as one of the best big companies to work for as well as a best place to work for diversity, working mothers, female executives, and scientists.

THE OPPORTUNITY

This _Cybersecurity Specialist_ position can work out remotely within the U.S.

The Cybersecurity Specialist is responsible for assisting and identifying potential security risks, vulnerabilities, and threats to execute mitigation and remediation strategies/processes that ensure Abbott builds safe and secure products that are compliant with industry cybersecurity regulation and meet customer and patient security expectations.

WHAT YOU’LL DO

• Develop and implement cybersecurity deliverables for product software releases and provide technical security responses to customer inquiries.
• Support the protection of manufacturing assets through implementation of security controls, vulnerability assessments, risk evaluations, and mitigation activities.
• Evaluate the cybersecurity posture of third-party vendors and suppliers providing components or services for products.
• Provide project updates, review policies, track compliance activities, coordinate cybersecurity initiatives, and support internal and external audits.
• Work with development operations and teams to develop and implement monitoring and security solutions in stand-alone and embedded product software and supporting applications. Conduct comprehensive software assessments to identify potential security risks and vulnerabilities.
• Support the security of applications and computing assets across public, private, and hybrid cloud environments.
• Protect applications in compliance with multiple global privacy, security, business resiliency and compliance frameworks.
• Support security system administration activities, assist with security configuration reviews, and help implement solutions to reduce risk.
• Participate in incident breach and response activities for product and supporting applications.
• Support the advancement of cyber threat and vulnerability management program to ensure consistent identification, analysis, response, and monitoring of cyber security threats, events, and vulnerabilities.
• Participate in cross-functional team coordination to achieve defined security goals as well as meet technical requirements in support of detailed implementation plans for security projects.
• Provide technical advice and training about potential security risks and prevention strategies.
• Develop security content for monthly site security metrics reporting on the efficacy and efficiency of security program deployment at the site, based on global metrics & reporting standards.
• Assist in the completion of Secure Lifecycle Process (SLP) cybersecurity assessments and threat modeling, ensuring compliance with industry standards and identifying potential security vulnerabilities throughout the software development lifecycle.

Qualifications:

• Bachelor's degree in Computer Science, Information Systems, Engineering, Cybersecurity, or a related field.
• Minimum 5 years of relevant professional experience, including at least2 years of experience in cybersecurity , information security, software security, IT, engineering, or a related discipline
• Demonstrated knowledge of cybersecurity frameworks and standards such as NIST, ISO 27001, IEC 62304, and Purdue Enterprise Reference Architecture (PERA).
• Understanding of product safety risk and relationship with product cybersecurity risk.
• Familiarity with secure software development lifecycle (SSDLC), vulnerability management, threat modeling, and cybersecurity best practices.
• Ability to manage multiple priorities with strong organizational and time-management skills.
• Demonstrated critical thinking, analytical skills, judgment, and logic for problem-solving and decision-making in an environment with changing priorities.
• Ability to work effectively in a team environment, adapting to rapidly changing business and technological needs.
• Excellent documentation, communication and interpersonal skills.

Preferred Qualifications:

• One or more industry-recognized cybersecurity certifications such as CISSP, CISM, CEH, Security+, GSEC, or equivalent are preferred.
• Experience or exposure to product security, medical device security, cloud security, or secure software development is preferred.