Job Details

Cybersecurity Manager

Abbott is a global healthcare leader that helps people live more fully at all stages of life. Our portfolio of life-changing technologies spans the spectrum of healthcare, with leading businesses and products in diagnostics, medical devices, nutritionals and branded generic medicines. Our 114,000 colleagues serve people in more than 160 countries.

At Abbott, you can do work that matters, grow, and learn, care for yourself and your family, be your true self, and live a full life. You'll also have access to:

• Career development with an international company where you can grow the career you dream of.
• Employees can qualify for free medical coverage in our Health Investment Plan (HIP) PPO medical plan in the next calendar year.
• An excellent retirement savings plan with a high employer contribution
• Tuition reimbursement, the Freedom 2 Save student debt program, and FreeU education benefit - an affordable and convenient path to getting a bachelor's degree.
• A company recognized as a great place to work in dozens of countries worldwide and named one of the most admired companies in the world by Fortune.
• A company that is recognized as one of the best big companies to work for as well as the best place to work for diversity, working mothers, female executives, and scientists.

The Opportunity

This Cybersecurity Manager role, based in our Ohio location, is responsible for deploying and sustaining Operations Technology (OT) cybersecurity across the Columbus and Altavista Nutrition Plants. The position leads the implementation of controls and procedures that cost-effectively safeguard OT and information systems from intentional or accidental modification, disclosure, or destruction. This work is performed in close partnership with Plant Operations, Engineering, Maintenance, Quality, and Enterprise IT Security.

What You'll Work On

• Provides strategic guidance and direction to functional teams on the physical and logical protection of OT and information systems assets.
• Prepares and delivers reports to leadership on OT/data security effectiveness and recommends enhancements or new procedures.
• Supports and provides updates to Cybersecurity Governance leadership.
• Devises and assigns work to OT Security Coordinators at sites (e.g. Columbus and Altavista), monitors performance, conducts appraisals, and participates in staffing decisions.
• Leads and executes the OT cybersecurity deployment and sustainment roadmap, including asset inventory, network segmentation, secure remote access, backup/restore, business continuity and disaster recovery exercises.
• Ensures alignment with Abbott and division-specific IT, operations, quality, and cybersecurity policies, standards, and procedures.
• Conducts and oversees cybersecurity Risk Management activities including risk assessments, reductions and remediations for OT systems and network infrastructure; performs Threat Modeling (e.g., STRIDE) and prioritizes Remediation activities.
• Coordinates Vulnerability Assessments and Patch Management for OT systems including HMIs, historian/app servers, and supporting infrastructure in collaboration with Engineering, Operations, Quality and IT.
• Ensures compliance with applicable manufacturing standards and regulations (e.g., ISO 27001, NIST SP 800-82, FDA guidance, HIPAA, GDPR/PCI DSS where relevant).
• Monitors global cybersecurity regulatory changes, integrates updates into plant procedures, supports internal/external audits, and drives remediation closure.
• Collaborates with Engineering, Quality, Operations, and IT to design secure architectures and apply cybersecurity controls throughout the SLC (Systems Lifecycle) and SDLC (Software Development Lifecycle).
• Maintains and enforces OT cybersecurity controls, standards and technologies such as firewalls, IDS/IPS, endpoint protection, DLP, SIEM, and log aggregation; enables continuous improvements to monitoring activities and escalates events as needed.
• Develops and maintains Vendor Risk Management programs in alignment with Abbott and division-specific policies, ensuring cybersecurity controls are embedded in OT procurement process and contractual agreements (e.g., approved remote access controls and tools, patch management), and drive site-level vendor risk assessments.
• Identifies and maintains site-level roles, responsibilities, and contacts for OT cybersecurity Incident Response in accordance with Abbott and division-specific policies, standards, and procedures.
• Leads OT Incident Response activities, including triage, root-cause analysis, corrective actions, lessons learned, and recurring tabletop exercises across both sites.
• Supports deployment and operational use of Governance, Risk, and Compliance (GRC) defined platforms to capture risks, controls, and actions of sites (e.g. Columbus and Altavista).
• Defines and tracks key performance and risk indicators (KPIs, KRIs) aligned with Abbott and division leadership, including OT asset coverage, patch compliance, vulnerability remediation SLAs, incident response readiness, and audit finding closure rates.

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Security, or related IT field.
• 8+ years of IT experience with strong cybersecurity expertise.
• Experience in cybersecurity within regulated manufacturing environments (food, beverage, healthcare, medical devices).
• Proficiency in risk management, threat modeling, vulnerability management, and incident response.
• Strong knowledge of cybersecurity governance and the Identify, Protect, Detect, Respond, and Recover capability areas.

Preferred Qualifications

• CISSP or CISM preferred; GICSP/IEC 62443 certifications a plus.
• Understanding of risk management programs, compliance activities, and cybersecurity operations.
• Experience working in regulated OT/ICS environments.

This is an onsite role located in Columbus, OH location. This is not a remote role/opportunity.

The base pay for this position is $99,300.00 $198,700.00. In specific locations, the pay range may vary from the range posted.