Director of Cybersecurity

Abbott; Lake Forest (IL); On-site; USD 171,000 - 343,000; Full time

Benefits offered by this job

Career development with international

Free medical coverage for employees

Excellent retirement savings plan

Tuition reimbursement

FreeU education benefit

Great place to work recognition

Diversity and inclusion programs

Job summary

Abbott in the United States (Lake Forest) seeks a Cybersecurity Director to lead divisional security strategy, governance, and risk management across enterprise, manufacturing, and product domains.

You will partner with Corporate Information Security, IT, Quality, Compliance and business leadership to drive programs, incident response, vulnerability management, and regulatory compliance (ISO 27001, NIST, HIPAA, GDPR).

Qualifications

• 15+ years of cybersecurity, technology, risk management and privacy leadership.
• Bachelor's degree in a related field; professional cybersecurity certification.
• Experience with ISO 27001, NIST, HIPAA, GDPR, SOX, PCI DSS and regulatory compliance.

Responsibilities

• Lead divisional information security program governance, risk management and transparency.
• Drive security strategy, incident response, vulnerability management and training.
• Oversee ISMS implementation, audits, reporting and remediation across divisions.
• Collaborate with Corporate Information Security, Quality, Compliance and executives.
• Translate regulatory requirements into practical security controls and programs.
• Develop security metrics and KRIs to guide investments and improvements.

Skills

Executive leadership

Stakeholder management

Communication

Risk management

Regulatory compliance

Strategic planning

Budgeting

Cross-functional collaboration

Education

Bachelor's degree in Computer Science / related field

CISSP or CISM certification

MBA (preferred)

Job description

Abbott is a global healthcare leader that helps people live more fully at all stages of life. Our portfolio of life-changing technologies spans the spectrum of healthcare, with leading businesses and products in diagnostics, medical devices, nutritionals and branded generic medicines. Our 122,000 colleagues serve people in more than 160 countries.

Benefits

• Career development with an international company where you can grow the career you dream of
• Free medical coverage for employees via the Health Investment Plan (HIP) PPO
• An excellent retirement savings plan with high employer contribution
• Tuition reimbursement, the Freedom 2 Save student debt program and FreeU education benefit - an affordable and convenient path to getting a bachelor’s degree
• A company recognized as a great place to work in dozens of countries around the world and named one of the most admired companies in the world by Fortune
• A company that is recognized as one of the best big companies to work for as well as a best place to work for diversity, working mothers, female executives, and scientists

Job Summary

The Cybersecurity Director serves as the divisional cybersecurity leader, responsible for implementing enterprise security strategies, managing cyber risk, and ensuring compliance with corporate, regulatory, and quality requirements. This role partners with Corporate Information Security, IT, Quality, Compliance, and business leadership to strengthen the division's security posture and support risk-informed business decisions. The Director leads the execution of key security programs, including governance, risk management, security architecture, vulnerability management, incident response, compliance, security awareness, and resilience initiatives. The role also provides strategic guidance, drives continuous improvement, and ensures alignment with Abbott's cybersecurity objectives and risk framework. This position requires strong business leadership, deep cybersecurity expertise, and experience operating in complex, regulated global environments.

Key Responsibilities

• Serve as the senior information security leader for the division, aligning divisional security priorities with Abbott's enterprise cybersecurity strategy, policies, and risk management framework.
• Accountable for cybersecurity strategy, governance, and risk oversight across enterprise, manufacturing, and product domains, driving the adoption of security controls and resilient practices that protect business operations, products, and information assets.
• Partner with Corporate Information Security, Quality, Compliance, and business leaders to ensure ongoing adherence to regulatory, contractual, and corporate security requirements, including ISO 27001 certification and surveillance activities.
• Lead the divisional Information Security Management System (ISMS), ensuring effective implementation, monitoring, and continuous improvement of security controls, processes, and governance practices.
• Drive adoption and execution of enterprise security programs across the division, including vulnerability management, incident response, identity and access management, security awareness, data protection, and third-party risk management.
• Provide divisional oversight of security risk assessments, control evaluations, remediation programs, and risk treatment activities, ensuring risks are appropriately identified, communicated, and managed.
• Partner with business, technology, and operational leaders to integrate security requirements into business initiatives, digital transformation efforts, and technology deployments.
• Establish and maintain divisional security governance forums, metrics, and reporting capabilities to provide leadership visibility into security posture, compliance status, emerging risks, and remediation progress.
• Lead a team of security professionals responsible for implementing and supporting security services, controls, and operational risk management activities within the division.
• Coordinate divisional participation in enterprise security awareness, training, testing, and compliance programs while addressing business-specific security requirements.
• Act as the primary security advisor to divisional leadership, providing guidance on risk decisions, emerging threats, regulatory changes, and business impacts.
• Oversee divisional preparedness for cybersecurity incidents, ensuring response plans, recovery capabilities, crisis management procedures, and business continuity activities align with enterprise standards.
• Partner with corporate incident response, threat intelligence, and security operations teams during significant security events, ensuring timely business engagement, communications, and remediation activities.
• Monitor evolving cyber threats, industry trends, and regulatory developments, translating relevant insights into actionable recommendations for divisional leadership.
• Drive security-related audit readiness and remediation efforts, coordinating with internal audit, external auditors, regulators, and corporate compliance teams as required.
• Develop and report meaningful security metrics and key risk indicators (KRIs) to measure program effectiveness, demonstrate risk reduction, and support investment decisions.
• Advocate for divisional security priorities and resource needs while influencing enterprise security roadmaps, capabilities, and service delivery models.

Additional Expertise / Scope

• Deep understanding of global cybersecurity, privacy, and compliance frameworks, including ISO 27001, NIST, GDPR, HIPAA, and other applicable regulations.
• Strong knowledge of regulatory requirements governing the protection of patient, clinical, and sensitive business data across global markets.
• Proven executive leadership with the ability to influence decisions, build trusted partnerships, and drive risk-informed business outcomes.
• Demonstrated success leading complex cybersecurity programs and cross-functional initiatives in global, matrixed organizations.
• Exceptional communication, negotiation, and stakeholder management skills, with experience engaging executive leadership, regulators, auditors, and business partners.
• Proven ability to attract, develop, mentor, and retain high-performing teams while fostering a culture of accountability and continuous improvement.
• Ability to translate evolving cybersecurity, privacy, and regulatory requirements into practical governance, risk management, and compliance strategies.
• Experience integrating cybersecurity requirements within regulated quality, compliance, and operational environments.
• Strong business acumen with the ability to balance security risk, regulatory obligations, operational needs, and business objectives.
• Demonstrated commitment to integrity, professionalism, and the promotion of a culture of security, resilience, and continuous improvement.

Required Qualifications

• 15+ years of cybersecurity, technology, risk management, and privacy leadership experience in global organizations.
• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field.
• Professional cybersecurity certification required (e.g., CISSP, CISM); additional certifications preferred.
• Deep knowledge of cybersecurity frameworks, regulations, and standards, including ISO 27001, NIST, HIPAA, SOX, PCI DSS, and GDPR.
• Proven experience leading cybersecurity governance, risk management, vulnerability management, incident response, and compliance programs.
• Strong business acumen with experience in strategic planning, budgeting, resource management, and organizational leadership.
• Exceptional communication and stakeholder management skills, with the ability to influence executive, technical, and business audiences.
• Experience building high-performing teams and leading audit, resilience, regulatory compliance, and continuous improvement initiatives.

Preferred Qualifications

• MBA a plus
• Experience working with global teams based in Europe, Asia, and the United States
• Experience operating within the Healthcare or Medical devices industries

Participants who complete a short wellness assessment qualify for FREE coverage in our HIP PPO medical plan. Free coverage applies in the next calendar year. Learn more about our health and wellness benefits, which provide the security to help you and your family live full lives: www.abbottbenefits.com

The base pay for this position is $171,300.00 – $342,700.00. In specific locations, the pay range may vary from the range posted.

JOB FAMILY: Information Risk & Quality Assurance

DIVISION: BTS Business Technology Services

LOCATION: United States > Lake Forest : J55

ADDITIONAL LOCATIONS:

WORK SHIFT: Standard

TRAVEL: Yes, 10 % of the Time

MEDICAL SURVEILLANCE: Not Applicable

SIGNIFICANT WORK ACTIVITIES: Continuous sitting for prolonged periods (more than 2 consecutive hours in an 8 hour day)

Abbott is an Equal Opportunity Employer of Minorities/Women/Individuals with Disabilities/Protected Veterans.

EEO is the Law link - English: http://webstorage.abbott.com/common/External/EEO_English.pdf

EEO is the Law link - Espanol: http://webstorage.abbott.com/common/External/EEO_Spanish.pdf

Abbott is an Equal Opportunity Employer, committed to employee diversity.

Abbott is about the power of health. For more than 135 years, Abbott has been helping people reach their potential - because better health allows people and communities to achieve more. With a diverse, global network serving customers in more than 160 countries, we create new solutions - across the spectrum of health, around the world, for all stages of life. Whether it’s next-generation diagnostics, life-changing devices, science-based nutrition, or novel reformulations, we are advancing some of the most innovative and revolutionary technologies in healthcare, helping people live their best lives through better health.

The people of Abbott come to work each day with relentless energy, enthusiasm and a promise to enhance the health and well-being of millions of people. They push the boundaries to help manage and treat some of life’s greatest health challenges. We invite you to explore opportunities at Abbott, to see if your talents and career aspirations may fit with our openings. An equal opportunity employer, Abbott welcomes and encourages diversity in our workforce.