Director of Cybersecurity

Abbott is a global healthcare leader that helps people live more fully at all stages of life. Our portfolio of life-changing technologies spans the spectrum of healthcare, with leading businesses and products in diagnostics, medical devices, nutritionals and branded generic medicines. Our 122,000 colleagues serve people in more than 160 countries.

     

JOB DESCRIPTION:

Working at Abbott

At Abbott, you can do work that matters, grow, and learn, care for yourself and family, be your true self and live a full life. You’ll also have access to:

• Career development with an international company where you can grow the career you dream of
• Free medical coverage for employees* via the Health Investment Plan (HIP) PPO
• An excellent retirement savings plan with high employer contribution
• Tuition reimbursement, the Freedom 2 Save student debt program and FreeU education benefit - an affordable and convenient path to getting a bachelor’s degree
• A company recognized as a great place to work in dozens of countries around the world and named one of the most admired companies in the world by Fortune
• A company that is recognized as one of the best big companies to work for as well as a best place to work for diversity, working mothers, female executives, and scientists

 

The Opportunity

 

The Cybersecurity Director serves as the divisional cybersecurity leader, responsible for implementing enterprise security strategies, managing cyber risk, and ensuring compliance with corporate, regulatory, and quality requirements. This role partners with Corporate Information Security, IT, Quality, Compliance, and business leadership to strengthen the division's security posture and support risk-informed business decisions.

 

The Director leads the execution of key security programs, including governance, risk management, security architecture, vulnerability management, incident response, compliance, security awareness, and resilience initiatives. The role also provides strategic guidance, drives continuous improvement, and ensures alignment with Abbott's cybersecurity objectives and risk framework.

 

This position requires strong business leadership, deep cybersecurity expertise, and experience operating in complex, regulated global environments.

 

What You'll Work On

 

• Serve as the senior information security leader for the division, aligning divisional security priorities with Abbott's enterprise cybersecurity strategy, policies, and risk management framework.
• Accountable for cybersecurity strategy, governance, and risk oversight across enterprise, manufacturing, and product domains, driving the adoption of security controls and resilient practices that protect business operations, products, and information assets.
• Partner with Corporate Information Security, Quality, Compliance, and business leaders to ensure ongoing adherence to regulatory, contractual, and corporate security requirements, including ISO 27001 certification and surveillance activities.
• Lead the divisional Information Security Management System (ISMS), ensuring effective implementation, monitoring, and continuous improvement of security controls, processes, and governance practices.
• Drive adoption and execution of enterprise security programs across the division, including vulnerability management, incident response, identity and access management, security awareness, data protection, and third-party risk management.
• Provide divisional oversight of security risk assessments, control evaluations, remediation programs, and risk treatment activities, ensuring risks are appropriately identified, communicated, and managed.
• Partner with business, technology, and operational leaders to integrate security requirements into business initiatives, digital transformation efforts, and technology deployments.
• Establish and maintain divisional security governance forums, metrics, and reporting capabilities to provide leadership visibility into security posture, compliance status, emerging risks, and remediation progress.
• Lead a team of security professionals responsible for implementing and supporting security services, controls, and operational risk management activities within the division.
• Coordinate divisional participation in enterprise security awareness, training, testing, and compliance programs while addressing business-specific security requirements.
• Act as the primary security advisor to divisional leadership, providing guidance on risk decisions, emerging threats, regulatory changes, and business impacts.
• Oversee divisional preparedness for cybersecurity incidents, ensuring response plans, recovery capabilities, crisis management procedures, and business continuity activities align with enterprise standards.
• Partner with corporate incident response, threat intelligence, and security operations teams during significant security events, ensuring timely business engagement, communications, and remediation activities.
• Monitor evolving cyber threats, industry trends, and regulatory developments, translating relevant insights into actionable recommendations for divisional leadership.
• Drive security-related audit readiness and remediation efforts, coordinating with internal audit, external auditors, regulators, and corporate compliance teams as required.
• Develop and report meaningful security metrics and key risk indicators (KRIs) to measure program effectiveness, demonstrate risk reduction, and support investment decisions.
• Advocate for divisional security priorities and resource needs while influencing enterprise security roadmaps, capabilities, and service delivery models.

 

Additional Expertise/Scope:

• Deep understanding of global cybersecurity, privacy, and compliance frameworks, including ISO 27001, NIST, GDPR, HIPAA, and other applicable regulations.
• Strong knowledge of regulatory requirements governing the protection of patient, clinical, and sensitive business data across global markets.
• Proven executive leadership with the ability to influence decisions, build trusted partnerships, and drive risk-informed business outcomes.
• Demonstrated success leading complex cybersecurity programs and cross-functional initiatives in global, matrixed organizations.
• Exceptional communication, negotiation, and stakeholder management skills, with experience engaging executive leadership, regulators, auditors, and business partners.
• Proven ability to attract, develop, mentor, and retain high-performing teams while fostering a culture of accountability and continuous improvement.
• Ability to translate evolving cybersecurity, privacy, and regulatory requirements into practical governance, risk management, and compliance strategies.
• Experience integrating cybersecurity requirements within regulated quality, compliance, and operational environments.
• Strong business acumen with the ability to balance security risk, regulatory obligations, operational needs, and business objectives.
• Demonstrated commitment to integrity, professionalism, and the promotion of a culture of security, resilience, and continuous improvement.

 

Required Qualifications

• 15+ years of cybersecurity, technology, risk management, and privacy leadership experience in global organizations.
• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field.
• Professional cybersecurity certification required (e.g., CISSP, CISM); additional certifications preferred.
• Deep knowledge of cybersecurity frameworks, regulations, and standards, including ISO 27001, NIST, HIPAA, SOX, PCI DSS, and GDPR.
• Proven experience leading cybersecurity governance, risk management, vulnerability management, incident response, and compliance programs.
• Strong business acumen with experience in strategic planning, budgeting, resource management, and organizational leadership.
• Exceptional communication and stakeholder management skills, with the ability to influence executive, technical, and business audiences.
• Experience building high-performing teams and leading audit, resilience, regulatory compliance, and continuous improvement initiatives.
• Preferred Qualifications

• MBA a plus
• Experience working with global teams based in Europe, Asia, and the United States
• Experience operating within the Healthcare or Medical devices industries

 

* Participants who complete a short wellness assessment qualify for FREE coverage in our HIP PPO medical plan. Free coverage applies in the next calendar year.

Learn more about our health and wellness benefits, which provide the security to help you and your family live full lives:  www.abbottbenefits.com 

Follow your career aspirations to Abbott for diverse opportunities with a company that can help you build your future and live your best life. Abbott is an Equal Opportunity Employer, committed to employee diversity.

     

The base pay for this position is

$171,300.00 – $342,700.00

In specific locations, the pay range may vary from the range posted.

     

JOB FAMILY:

Information Risk & Quality Assurance

     

DIVISION:

BTS Business Technology Services

        

LOCATION:

United States > Lake Forest : J55

     

ADDITIONAL LOCATIONS:

     

WORK SHIFT:

Standard

     

TRAVEL:

Yes, 10 % of the Time

     

MEDICAL SURVEILLANCE:

Not Applicable

     

SIGNIFICANT WORK ACTIVITIES:

Continuous sitting for prolonged periods (more than 2 consecutive hours in an 8 hour day)

     

Abbott is an Equal Opportunity Employer of Minorities/Women/Individuals with Disabilities/Protected Veterans.

     

EEO is the Law link - English: http://webstorage.abbott.com/common/External/EEO_English.pdf

     

EEO is the Law link - Espanol: http://webstorage.abbott.com/common/External/EEO_Spanish.pdf