About the role

AI summarised

The Senior Cybersecurity Specialist is responsible for protecting Abbott Nutrition's digital assets and infrastructure by conducting risk assessments, implementing security controls, ensuring regulatory compliance, and responding to cybersecurity incidents. This role involves collaboration with IT, engineering, and operations teams to secure manufacturing environments and support secure software development lifecycle practices.

HealthcareOnsite

Key Responsibilities

Conduct cybersecurity risk assessments for software, systems, and network infrastructure
Perform threat modeling using tools such as STRIDE
Conduct and support vulnerability assessments and penetration testing
Ensure compliance with relevant standards and regulations (e.g., ISO 27001, NIST SP 800-82, FDA, HIPAA, GDPR, PCI DSS)
Monitor and interpret changes in global cybersecurity regulations and standards, integrating them into Abbott Nutrition policies and procedures
Support internal and external audits, including remediation coordination at Abbott Nutrition sites
Collaborate with engineering and development teams to design secure system architectures
Guide teams in applying cybersecurity controls throughout the software development lifecycle (SDLC)
Monitor cybersecurity threats and develop mitigation strategies
Respond to and investigate cybersecurity incidents, identifying root causes and recovery actions
Utilize and manage security technologies including firewalls, intrusion detection/prevention systems (IDS/IPS), endpoint protection, data loss prevention (DLP), SIEM systems, and log aggregation tools
Support the deployment and operational use of Governance, Risk, and Compliance (GRC) platforms

Requirements

Bachelor’s Degree in Computer Science, Engineering, Information Security, or related field
5+ years of experience in cybersecurity, preferably in regulated industries such as food, beverage, healthcare, or medical devices
Experience with cloud security, network protocols (SSL/TLS, VPNs, IPsec), and secure cloud-based applications
Familiarity with regulatory compliance (SOX, HIPAA, GDPR, FDA cybersecurity guidance)
Proficiency in threat modeling, risk management, vulnerability management, and incident response
Experience securing both software and hardware systems in manufacturing environments
Strong understanding of cybersecurity frameworks (ISO 27001, NIST, SOC 2, HITRUST, NIST SP 800-82)
CISSP, CISM, or equivalent certification preferred