Product Security Analyst

Abbott is a global healthcare leader that helps people live more fully at all stages of life. Our portfolio of life-changing technologies spans the spectrum of healthcare, with leading businesses and products in diagnostics, medical devices, nutritionals and branded generic medicines. Our 114,000 colleagues serve people in more than 160 countries.

     

JOB DESCRIPTION:

Working at Abbott

At Abbott, you can do work that matters, grow, and learn, care for yourself and your family, be your true self, and live a full life. You’ll also have access to:

• Career development with an international company where you can grow the career you dream of.
• Employees can qualify for free medical coverage in our Health Investment Plan (HIP) PPO medical plan in the next calendar year.
• An excellent retirement savings plan with a high employer contribution
• Tuition reimbursement, the Freedom 2 Save student debt program, and FreeU education benefit - an affordable and convenient path to getting a bachelor’s degree.
• A company recognized as a great place to work in dozens of countries worldwide and named one of the most admired companies in the world by Fortune.
• A company that is recognized as one of the best big companies to work for as well as the best place to work for diversity, working mothers, female executives, and scientists.

The Opportunity

The Product Security Analyst is a high caliber performer responsible for identifying security risks of developed, marketed, and fielded products, including, but not limited to, patient safety and data protection risks.  The Product Security Analyst will help build and maintain a product security program that offers services such as: product security risk assessment, security testing, security event handling, metrics & monitoring.

Responsibilities:

• In a team environment, support the implementation, integration and maintenance of security technologies enabling security shared services.
• Develop and maintain technical documentation for internal and external use and effectively transfer knowledge to business and IT team members.
• Evaluate potential technologies, process flows, and toolset configurations to improve operations and efficiencies of security shared services.
• Provide end-user support and resolve technical issues.
• Stay up to date with medical device security industry trends, regulations, and standards/guidance to inform implementation design.
• Perform all procedures necessary to ensure the safety of information systems and to protect systems from intentional or inadvertent access or destruction.
• Participate in company-wide product security initiatives as necessary
• Maintain positive and cooperative communication and collaboration with all levels of employees, customers, contractors, and vendors.
• Must be able to weigh business needs against security concerns and articulate issues to management.
• Communicate product security messaging throughout the organization, including program updates with Senior Management.
• Perform other related duties and responsibilities, on occasion, as assigned

Required Qualifications:

Education and Required experience:

• Bachelor’s degree in computer science, MIS, Information Assurance, or related field.  Equivalent combinations of education and work experience may be considered.
• 2 - 6 years of experience in IT Security/IT Audit/Risk Management, experience with software development/security testing and related SAST/DAST/SCA/vulnerability scanning tools is preferred. 

• Strong experience with Medical device security industry trends, regulations, and standards/guidance to inform implementation design.

• Intermediate experience Atlassian JIRA/Confluence and SOAR technology knowledge
• Must have strong time management skills and an ability to thrive in a high cadence operation
• Must work well within a tight-knit team environment and be able to work with peers, customers, and partners to support the mission.

Preferred Qualifications:

• Ability to obtain industry certifications (i.e., CISSP / CISA / CISM / GIAC Web Application Penetration Tester (GWAPT))
• History of completing successful cross-functional projects and driving positive compliance outcomes.
• Knowledge of national and international regulatory compl