Director, Cybersecurity Controls and Oversight

Employment Type: Full-time

Position Overview

Abbott is a global healthcare leader dedicated to helping people live more fully at all stages of life. Our comprehensive portfolio of life-changing technologies spans diagnostics, medical devices, nutritionals, and branded generic medicines. With 114,000 colleagues serving individuals in over 160 countries, Abbott is committed to advancing health and well-being worldwide.

This role is based in our Lake County, Illinois, Minneapolis/St Paul, Minnesota, or Chicago, IL locations within the Business Technology Services group. The Director, Cybersecurity Controls and Oversight is responsible for collaborating with leadership to enhance and maintain the company's approach to applying and adhering to cybersecurity controls and protections. This position leads a team of subject matter experts focused on verifying and driving the effectiveness of Abbott’s cybersecurity requirements.

What You'll Work On

• GRC Transformation: Support a large Governance, Risk, and Compliance (GRC) transformation project, advancing the compliance oversight strategy and overseeing the rollout of refreshed processes within updated tooling.
• Program Oversight & Improvement: Continuously oversee and lead operational excellence and improvements in existing programs, including issue management, security exceptions, and tailored compliance assessments (PCI, SOx, SWIFT, ISO27001). These programs and processes must drive timely remediation of any identified improvements through process enhancements, leadership dashboards, and other mechanisms.
• Second Line of Defense: Design and direct robust processes to incorporate additions to the second line of defense and oversight mechanisms for controls via new GRC functionality. This includes the implementation of:
  • Control attestations
  • Testing procedures
  • Indicators
  • Automation of controls oversight
• Audit Liaison: Serve as the audit liaison for various internal and external audit stakeholder groups, assisting teams in understanding the complex business environment.
• Subject Matter Expertise: Provide subject matter expertise and assistance to stakeholders, advising on the most effective and efficient controls application strategy.
• Communication: Effectively communicate risk-related concepts to stakeholders, with the ability to simplify complex information.
• Talent Management: Attract and retain talent, ensuring staff development in leadership, cross-functional collaboration, technical skills, and a global perspective.
• Financial Management: Manage an operating budget and project spend with financial discipline.
• Resource Management: Establish and maintain a resource model that can adapt as needed to support controls testing rollouts and/or special initiatives.
• Relationship Building: Build and maintain essential relationships for the successful execution of the cybersecurity controls, compliance, and oversight program.

Working at Abbott

At Abbott, you can engage in meaningful work, foster your growth, prioritize your well-being and that of your family, embrace your authentic self, and lead a fulfilling life. You will also benefit from:

• Career Development: Opportunities for career advancement within an international company where you can build the career you aspire to.
• Healthcare Coverage: Free medical coverage for employees* through the Health Investment Plan (HIP) PPO.
• Retirement Savings: An excellent retirement savings plan with substantial employer contributions.
• Education Benefits: Tuition reimbursement, the Freedom 2 Save student debt program, and the FreeU education benefit – providing an affordable and convenient pathway to earn a bachelor’s degree.
• Recognition: A company recognized as a great place to work in numerous countries globally and named one of the most admired companies in the world by Fortune.
• Workplace Excellence: A company acknowledged as one of the best large companies to work for, as well as a top workplace for diversity, working mothers, female executives, and scientists.

Required Qualifications

• Bachelor's Degree in Information Security, Risk / IT Management, Computer Science, Computer Engineering, or a related field.