Cybersecurity Manager

Jobtailor; Illinois; On-site; USD 140,000 - 200,000; Full time

Job summary

Abbott is seeking a senior cybersecurity leader to act as a trusted advisor to business and technology leadership in Illinois. You will align enterprise cybersecurity strategy with business objectives, integrating security, privacy, and regulatory requirements into product development and technology initiatives.

The role leads risk-based decision-making, prioritizes investments to protect assets and patients, and collaborates with cross-functional teams including vendors and development groups

Qualifications

• 10–12 years of experience with mastery of at least two security domains.
• Bachelor’s degree in Information Security, Computer Science, or related field, or equivalent experience.
• Knowledge of General Computer Controls, including Information Security, Information System Operations, Vendor Management, Business Continuity, Networks, Database, System Software, Hardware, and Application Development controls
• Expertise in NIST cybersecurity framework, ISO 27001/2, SOC2, HITRUST, and FedRAMP information security standards
• CISM Certification (or similar)
• Familiarity with national and international regulatory compliance and frameworks including NIST, ISO, SOX, GDPR, HIPAA, and FDA
• Understanding of OWASP, CVSS, and the MITRE ATT&CK framework
• Strong communication, organizational, critical attention to detail, and multitasking skills
• Ability to communicate regulatory requirements, security objectives, policies, and standards in business terms
• Preferred: Medical device and manufacturing cybersecurity experience
• Preferred: Ability to balance cybersecurity requirements with business objectives and product delivery timelines
• Preferred: Audit and Risk Management experience

Responsibilities

• Serve as a cybersecurity advisor and strategic partner to business and technology leadership.
• Align business objectives with enterprise cybersecurity strategy.
• Integrate security, privacy, and regulatory requirements into business decisions, product development, and technology initiatives.
• Lead risk-based decision-making and facilitate stakeholder engagement.
• Prioritize cybersecurity investments while protecting Abbott’s assets, products, data, and patients.
• Guide business units, operations teams, application development teams, and third-party vendors in achieving program requirements.
• Support development of cybersecurity strategies, policies, and standards.
• Attend project and implementation meetings as the cybersecurity subject matter expert.
• Monitor current and proposed cybersecurity changes affecting regulatory, privacy, and security best practices.
• Contribute to a risk-based cybersecurity program aligned with regulatory requirements and industry practices.
• Collaborate with cross-functional teams to ensure compliance with laws, regulations, and policies across Abbott’s jurisdictions.
• Contribute to cybersecurity toolset design for automated vulnerability discovery, remediation, and alerting.
• Apply familiarity with AI governance, data governance, and emerging technology risk management

Skills

NIST Cybersecurity Framework

ISO 27001/2

CISM Certification

Regulatory Compliance

Risk Management

Vendor Management

OWASP

MITRE ATT&CK

Communication Skills

Cross-functional Leadership

Education

Bachelor’s degree in Information Security or Computer Science

Tools

Cybersecurity Toolset Design

Automated Vulnerability Discovery

Remediation

Alerting

Job description

• Serve as a cybersecurity advisor and strategic partner to business and technology leadership
• Align business objectives with enterprise cybersecurity strategy
• Integrate security, privacy, and regulatory requirements into business decisions, product development, and technology initiatives
• Lead risk-based decision-making and facilitate stakeholder engagement
• Prioritize cybersecurity investments while protecting Abbott’s assets, products, data, and patients
• Guide business units, operations teams, application development teams, and third-party vendors in achieving program requirements
• Support development of cybersecurity strategies, policies, and standards
• Attend project and implementation meetings as the cybersecurity subject matter expert
• Monitor current and proposed cybersecurity changes affecting regulatory, privacy, and security best practices
• Contribute to a risk-based cybersecurity program aligned with regulatory requirements and industry practices
• Collaborate with cross-functional teams to ensure compliance with laws, regulations, and policies across Abbott’s jurisdictions
• Contribute to cybersecurity toolset design for automated vulnerability discovery, remediation, and alerting
• Apply familiarity with AI governance, data governance, and emerging technology risk management

Requirements

• 10–12 years of experience required, with demonstrable mastery of at least two security domains
• Bachelor’s degree in Information Security, Computer Science, or related field, or equivalent experience
• Knowledge of General Computer Controls, including Information Security, Information System Operations, Vendor Management, Business Continuity, Networks, Database, System Software, Hardware, and Application Development controls
• Expertise in NIST cybersecurity framework, ISO 27001/2, SOC2, HITRUST, and FedRAMP information security standards
• CISM Certification (or similar)
• Familiarity with national and international regulatory compliance and frameworks including NIST, ISO, SOX, GDPR, HIPPA, and FDA
• Understanding of OWASP, CVSS, and the MITRE ATT&CK framework
• Strong communication, organizational, critical attention to detail, and multitasking skills
• Ability to communicate regulatory requirements, security objectives, policies, and standards in business terms
• Preferred: Medical device and manufacturing cybersecurity experience
• Preferred: Ability to balance cybersecurity requirements with business objectives and product delivery timelines
• Preferred: Audit and Risk Management experience

Core Competencies

Demonstrates expertise in cybersecurity strategy, regulatory compliance, and risk management, with a strong focus on aligning business objectives with security initiatives. Proficient in leading cross-functional teams and communicating complex security concepts in business terms.

Highest-signal resume keywords

• NIST Cybersecurity Framework
• ISO 27001/2
• CISM Certification
• Regulatory Compliance
• Risk Management

Hard Skills

• Information Security
• Vendor Management
• Business Continuity
• Network Security
• Database Security
• Application Development Controls
• OWASP
• CVSS
• MITRE ATT&CK Framework
• Cybersecurity Strategy Development

Soft Skills

• Strong Communication
• Organizational Skills
• Attention to Detail
• Multitasking

Certifications & Qualifications

• CISM Certification

Industry Keywords

• General Computer Controls
• HITRUST
• FedRAMP
• SOX
• GDPR
• HIPAA
• Medical Device Cybersecurity
• Manufacturing Cybersecurity

Tools & Technologies

• Cybersecurity Toolset Design
• Automated Vulnerability Discovery
• Remediation
• Alerting