Director Product Cybersecurity

About the role

The Director, Product Cybersecurity role is responsible for assisting and ensuring Abbott Products are safe and secure, building products that are compliant with industry regulation, and meeting customer and patient security expectations. This candidate will be a key point of contact for the CoreDx division.

Responsibilities

• Divisional cybersecurity process Subject Matter Expert (SME) for multiple Abbott Organizations and Process Owner
• Cybersecurity for Medical and Non-medical products
• Cybersecurity Product Inventory
• Cybersecurity Risk and Vulnerability Management and Process
• Identification of Cybersecurity requirements for Suppliers and Distributors
• Providing Cybersecurity input to internal and external communications
• Conducting Cybersecurity Incident Response Tabletop Exercises
• Conducting Cybersecurity Oversight Committee Meetings to inform Executive Leadership of Cybersecurity Initiatives, Goals, and areas of interest
• Assessment of Cybersecurity regulations for impact to CoreDx products

Qualifications

• BA/BS in Business, Engineering, Computer Science, or related disciplines
• Master’s degree is desirable
• Overall 10+ years’ experience with 5+ years of experience working in Engineering, Cyber support, or Product support
• Strong understanding of Customers, Product Cybersecurity and the relationship between threat, vulnerability and potential customer risk in the context of risk management
• Understanding medical product safety risk and the relationship with product Cybersecurity risk
• Familiarity with FDA and other countries Regulatory bodies on Cybersecurity guidelines for medical devices and corporate enterprise network
• Familiarity with design of diagnostic medical devices is a plus
• Understanding industry standards such as the NIST Cybersecurity Framework, FedRAMP, RMF, TIR-57 Principles for medical device security risk management, etc.

Skills

• Previous work experience in a Product role
• Previous work experience in a regulated environment
• Experience with medical device certifications from government agencies is preferred
• Certifications such as CISA, CISM, CRISC, CISSP, CPP or CFE are preferred
• Knowledge of the latest methodologies for enterprise and product cybersecurity risk assessment and vulnerability management and technologies and tools used within the security domain is desired
• Effective Communication skills and collaboration skills

Pay

The base pay for this position is $149,300.00 – $298,700.00. In specific locations, the pay range may vary from the range posted.