Company Description
AbbVie’s mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people’s lives across several key therapeutic areas – immunology, oncology, neuroscience, and eye care – and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us at Follow @abbvie on Twitter, Facebook, Instagram, YouTube and LinkedIn.
Job Description
Come to work each day with an inclusive and collaborative business technology team. As an Operational Technology (OT) Security Engineer in AbbVie Business Technology Solutions (BTS), you’ll have opportunities to contribute to the digital transformation of a leading biopharma company, helping to create solutions that impact patients and their communities for the better.
This position can be remote anywhere in the U.S.
AbbVie’s Information Security team is looking for a candidate to join our newly forming Operational Technology (OT) Security Team. The Sr. OT Cybersecurity Engineer role will be responsible for the safeguarding of AbbVie’s Manufacturing and Research Technologies as well as ensuring the security of critical infrastructure systems that support AbbVie’s business operations. This includes assessing and mitigating risks associated with OT systems, developing and implementing security controls, and collaborating with cross-functional teams to ensure compliance with industry standards and regulatory requirements. The ideal candidate will have a strong background in OT security, network design and architecture, and experience working in a highly regulated environment. They should also possess excellent communication and collaboration skills, as they will be working closely with various stakeholders across the organization to ensure the security and reliability of our OT systems.
If you are a highly motivated, self-driven individual that is never satisfied with the status quo then here are the details.
Major Duties and Responsibilities:
* Support Operational Technology (OT) Security aspects of AbbVie’s Manufacturing and Research Technology initiatives by assisting in architecture, engineering, design, implementation, deployment, and operational transition of innovative & secure technology solutions.
* Lead OT cybersecurity, and secure by design assessments including detailed design reviews, network topology reviews, and mapping of data flows to ports, protocols, and services.
* Contribute to the creation of OT/ICS cybersecurity guardrails to ensure all OT architectures, solutions and technologies across the AbbVie enterprise are built using a secure-by-design methodology
* Utilize industry standards and frameworks (e.g., NIST-800-53/82, ISA/IEC-62443), to identify capabilities and technologies to provide enhanced cyber defenses in diverse scenarios
* Support cybersecurity risk assessments for AbbVie’s Risk Management team to determine criticality rankings and risk gaps
* Provide recommendations and plans to mitigate identified issues from OT/ICS cybersecurity and risk assessments, and ICS Vulnerability assessments
* Lead or participate in industry standard committees or work groups for OT/ICS environments
* Influence and educate stakeholders at an enterprise level on OT Cyber initiatives.
* Provide subject matter leadership during cyber incidents, response, and remediation.
Specifically, we’re looking for:
* Demonstrated understanding of OT/ICS critical infrastructure in Pharmaceutical or similar industries including and understanding of threats, vulnerabilities, attack paths and exploits in an OT/ICS environment.
* Proficiency in OT/ICS network design and building network architecture drawings.
* Demonstrated ability to influence others, work effectively, and communicate effectively at all levels with operations, design, projects, vendors, peers, etc.
* Knowledge of techniques and tools that promote effective analysis and the ability to determine root cause and resolution of problem.
* Communicates in a clear, concise, understandable manner both orally and in writing.
* Familiarity with Cloud and OT/ICS integration is preferred, but not required.
Qualifications
* Bachelor’s Degree with 7 years experience OR Master’s Degree with 6 years experience OR PhD with 2 years experience.
* To be successful, the candidate must have relevant work experience due to the complexity of our global OT Security environment.
* Cybersecurity certification such as the CISSP, or GICSP is preferred, but not required.
* Minimum 5 years related work experience in Operational Technology/Industrial Controls Systems Cybersecurity field with increasing levels of responsibility.
* “Hands-On” experience with OT/ICS critical infrastructure in Pharmaceuticals or similar industries preferred.
* Experience in utilizing frameworks and standards such as NIST SP 800-53/82 and IEC-62443 in an ICS environment
* Experience in conducting and/or leading cybersecurity assessments (risk, vulnerability) and creating a detailed mitigation plan and recommendations to address gaps identified
* Experience with selecting, designing, architecting, and deploying security technologies to an OT/ICS environment
* Demonstrated OT Cybersecurity project experience including leading the development of security architectures (programs) and secure network architectures (systems).
Why Business Technology Solutions
For anyone who wants to use technology and data to make a difference in people’s lives, shape the digital transformation of a leading biopharmaceutical company, and secure sustainable career growth within a diverse, global team: we’re ready for you.
Additional Information
Applicable only to applicants
remote work Security icalendar instruction-set Certified Information Systems Security Professional (CISSP)