Director of Cybersecurity

Abbott is a global healthcare leader that helps people live more fully at all stages of life. Our portfolio of life-changing technologies spans the spectrum of healthcare with leading businesses and products in diagnostics medical devices nutritionals and branded generic medicines. Our 122000 colleagues serve people in more than 160 countries.

Working at Abbott

At Abbott you can do work that matters grow and learn care for yourself and family be your true self and live a full life. Youll also have access to:

• Career development with an international company where you can grow the career you dream of
• Free medical coverage for employees* via the Health Investment Plan (HIP) PPO
• An excellent retirement savings plan with high employer contribution
• Tuition reimbursement the Freedom 2 Save student debt program and FreeU education benefit - an affordable and convenient path to getting a bachelors degree
• A company recognized as a great place to work in dozens of countries around the world and named one of the most admired companies in the world by Fortune
• A company that is recognized as one of the best big companies to work for as well as a best place to work for diversity working mothers female executives and scientists

The Opportunity

The Cybersecurity Director serves as the divisional cybersecurity leader responsible for implementing enterprise security strategies managing cyber risk and ensuring compliance with corporate regulatory and quality requirements. This role partners with Corporate Information Security IT Quality Compliance and business leadership to strengthen the divisions security posture and support risk-informed business decisions.

The Director leads the execution of key security programs including governance risk management security architecture vulnerability management incident response compliance security awareness and resilience initiatives. The role also provides strategic guidance drives continuous improvement and ensures alignment with Abbotts cybersecurity objectives and risk framework.

This position requires strong business leadership deep cybersecurity expertise and experience operating in complex regulated global environments.

What Youll Work On

• Serve as the senior information security leader for the division aligning divisional security priorities with Abbotts enterprise cybersecurity strategy policies and risk management framework.
• Accountable for cybersecurity strategy governance and risk oversight across enterprise manufacturing and product domains driving the adoption of security controls and resilient practices that protect business operations products and information assets.
• Partner with Corporate Information Security Quality Compliance and business leaders to ensure ongoing adherence to regulatory contractual and corporate security requirements including ISO 27001 certification and surveillance activities.
• Lead the divisional Information Security Management System (ISMS) ensuring effective implementation monitoring and continuous improvement of security controls processes and governance practices.
• Drive adoption and execution of enterprise security programs across the division including vulnerability management incident response identity and access management security awareness data protection and third-party risk management.
• Provide divisional oversight of security risk assessments control evaluations remediation programs and risk treatment activities ensuring risks are appropriately identified communicated and managed.
• Partner with business technology and operational leaders to integrate security requirements into business initiatives digital transformation efforts and technology deployments.
• Establish and maintain divisional security governance forums metrics and reporting capabilities to provide leadership visibility into security posture compliance status emerging risks and remediation progress.
• Lead a team of security professionals responsible for implementing and supporting security services controls and operational risk management activities within the division.
• Coordinate divisional participation in enterprise security awareness training testing and compliance programs while addressing business-specific security requirements.
• Act as the primary security advisor to divisional leadership providing guidance on risk decisions emerging threats regulatory changes and business impacts.
• Oversee divisional preparedness for cybersecurity incidents ensuring response plans recovery capabilities crisis management procedures and business continuity activities align with enterprise standards.
• Partner with corporate incident response threat intelligence and security operations teams during significant security events ensuring timely business engagement communications and remediation activities.
• Monitor evolving cyber threats industry trends and regulatory developments translating relevant insights into actionable recommendations for divisional leadership.
• Drive security-related audit readiness and remediation efforts coordinating with internal audit external auditors regulators and corporate compliance teams as required.
• Develop and report meaningful security metrics and key risk indicators (KRIs) to measure program effectiveness demonstrate risk reduction and support investment decisions.
• Advocate for divisional security priorities and resource needs while influencing enterprise security roadmaps capabilities and service delivery models.

Additional Expertise/Scope:

• Deep understanding of global cybersecurity privacy and compliance frameworks including ISO 27001 NIST GDPR HIPAA and other applicable regulations.
• Strong knowledge of regulatory requirements governing the protection of patient clinical and sensitive business data across global markets.
• Proven executive leadership with the ability to influence decisions build trusted partnerships and drive risk-informed business outcomes.
• Demonstrated success leading complex cybersecurity programs and cross-functional initiatives in global matrixed organizations.
• Exceptional communication negotiation and stakeholder management skills with experience engaging executive leadership regulators auditors and business partners.
• Proven ability to attract develop mentor and retain high-performing teams while fostering a culture of accountability and continuous improvement.
• Ability to translate evolving cybersecurity privacy and regulatory requirements into practical governance risk management and compliance strategies.
• Experience integrating cybersecurity requirements within regulated quality compliance and operational environments.
• Strong business acumen with the ability to balance security risk regulatory obligations operational needs and business objectives.
• Demonstrated commitment to integrity professionalism and the promotion of a culture of security resilience and continuous improvement.

Required Qualifications

• 15 years of cybersecurity technology risk management and privacy leadership experience in global organizations.
• Bachelors degree in Computer Science Information Systems Cybersecurity or a related field.
• Professional cybersecurity certification required (e.g. CISSP CISM); additional certifications preferred.
• Deep knowledge of cybersecurity frameworks regulations and standards including ISO 27001 NIST HIPAA SOX PCI DSS and GDPR.
• Proven experience leading cybersecurity governance risk management vulnerability management incident response and compliance programs.
• Strong business acumen with experience in strategic planning budgeting resource management and organizational leadership.
• Exceptional communication and stakeholder management skills with the ability to influence executive technical and business audiences.
• Experience building high-performing teams and leading audit resilience regulatory compliance and continuous improvement initiatives.
• Preferred Qualifications

• MBA a plus
• Experience working with global teams based in Europe Asia and the United States
• Experience operating within the Healthcare or Medical devices industries

* Participants who complete a short wellness assessment qualify for FREE coverage in our HIP PPO medical plan. Free coverage applies in the next calendar year.

Learn more about our health and wellness benefits which provide the security to help you and your family live full lives:

Follow your career aspirations to Abbott for diverse opportunities with a company that can help you build your future and live your best life. Abbott is an Equal Opportunity Employer committed to employee diversity.

The base pay for this position is

$171300.00 $342700.00

In specific locations the pay range may vary from the range posted.

Information Risk & Quality Assurance

BTS Business Technology Services

United States > Lake Forest : J55

Standard

Yes 10 % of the Time

Not Applicable

Continuous sitting for prolonged periods (more than 2 consecutive hours in an 8 hour day)

Abbott is an Equal Opportunity Employer of Minorities/Women/Individuals with Disabilities/Protected Veterans.

EEO is the Law link - English: EEO is the Law link - Espanol: Experience:

Director