Company Description AbbVie’s mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people’s lives across several key therapeutic areas – immunology, oncology, neuroscience, and eye care – and products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us at Follow @abbvie on Twitter, Facebook, Instagram, YouTube and LinkedIn. Job Description Come to work each day with an inclusive and collaborative business technology team. As an Operational Technology (OT) Security Engineer in AbbVie Business Technology Solutions (BTS), you’ll have opportunities to contribute to the digital transformation of a leading biopharma company, helping to create solutions that impact patients and their communities for the better. This position can be remote anywhere in the U.S. AbbVie’s Information Security team is looking for a candidate to join our newly forming Operational Technology (OT) Security Team. The Sr. OT Cybersecurity Engineer role will be responsible for the safeguarding of AbbVie’s Manufacturing and Research Technologies as well as ensuring the security of critical infrastructure systems that support AbbVie’s business operations. This includes assessing and mitigating risks associated with OT systems, developing and implementing security controls, and collaborating with cross-functional teams to ensure compliance with industry standards and regulatory requirements. The ideal candidate will have a strong background in OT security, network design and architecture, and experience working in a highly regulated environment. They should also possess excellent communication and collaboration skills, as they will be working closely with various stakeholders across the organization to ensure the security and reliability of our OT systems. If you are a highly motivated, self-driven individual that is never satisfied with the status quo then here are the details. Major Duties and Responsibilities: Support Operational Technology (OT) Security aspects of AbbVie’s Manufacturing and Research Technology initiatives by assisting in architecture, engineering, design, implementation, deployment, and operational transition of innovative & secure technology solutions. Lead OT cybersecurity, and secure by design assessments including detailed design reviews, network topology reviews, and mapping of data flows to ports, protocols, and services. Contribute to the creation of OT/ICS cybersecurity guardrails to ensure all OT architectures, solutions and technologies across the AbbVie enterprise are built using a secure-by-design methodology Utilize industry standards and frameworks (e.g., NIST-800-53/82, ISA/IEC-62443), to identify capabilities and technologies to provide enhanced cyber defenses in diverse scenarios Support cybersecurity risk assessments for AbbVie’s Risk Management team to determine criticality rankings and risk gaps Provide recommendations and plans to mitigate identified issues from OT/ICS cybersecurity and risk assessments, and ICS Vulnerability assessments Lead or participate in industry standard committees or work groups for OT/ICS environments Influence and educate stakeholders at an enterprise level on OT Cyber initiatives. Provide subject matter leadership during cyber incidents, response, and remediation. Specifically, we’re looking for: Demonstrated understanding of OT/ICS critical infrastructure in Pharmaceutical or similar industries including and understanding of threats, vulnerabilities, attack paths and exploits in an OT/ICS environment. Proficiency in OT/ICS network design and building network architecture drawings. Demonstrated ability to influence others, work effectively, and communicate effectively at all levels with operations, design, projects, vendors, peers, etc. Knowledge of techniques and tools that promote effective analysis and the ability to determine root cause and resolution of problem. Communicates in a clear, concise, understandable manner both orally and in writing. Familiarity with Cloud and OT/ICS integration is preferred, but not required. Qualifications Bachelor’s Degree with 7 years experience OR Master’s Degree with 6 years experience OR PhD with 2 years experience. To be successful, the candidate must have relevant work experience due to the complexity of our global OT Security environment. Cybersecurity certification such as the CISSP, or GICSP is preferred, but not required. Minimum 5 years related work experience in Operational Technology/Industrial Controls Systems Cybersecurity field with increasing levels of responsibility. “Hands-On” experience with OT/ICS critical infrastructure in Pharmaceuticals or similar industries preferred. Experience in utilizing frameworks and standards such as NIST SP 800-53/82 and IEC-62443 in an ICS environment Experience in conducting and/or leading cybersecurity assessments (risk, vulnerability) and creating a detailed mitigation plan and recommendations to address gaps identified Experience with selecting, designing, architecting, and deploying security technologies to an OT/ICS environment Demonstrated OT Cybersecurity project experience including leading the development of security architectures (programs) and secure network architectures (systems). Why Business Technology Solutions For anyone who wants to use technology and data to make a difference in people’s lives, shape the digital transformation of a leading biopharmaceutical company, and secure sustainable career growth within a diverse, global team: we’re ready for you. Additional Information Applicable only to applicants applying to a position in any location with pay disclosure requirements under state or local law: The compensation range described below is the range of possible base pay compensation that the Company believes in good faith it will pay for this role at the time of this posting based on the job grade for this position. Individual compensation paid within this range will depend on many factors including geographic location, and we may ultimately pay more or less than the posted range. This range may be modified in the future. We offer a comprehensive package of benefits including paid time off (vacation, holidays, sick), medical/dental/vision insurance and 401(k) to eligible employees. This job is eligible to participate in our short-term incentive programs. This job is eligible to participate in our long-term incentive programs Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, incentive, benefits, or any other form of compensation and benefits that are allocable to a particular employee remains in the Company’s sole and absolute discretion unless and until paid and may be modified at the Company’s sole and absolute discretion, consistent with applicable law. AbbVie is committed to operating with integrity, driving innovation, transforming lives, serving our community and embracing diversity and inclusion. It is AbbVie’s policy to employ qualified persons of the greatest ability without discrimination against any employee or applicant for employment because of race, color, religion, national origin, age, sex (including pregnancy), physical or mental disability, medical condition, genetic information, gender identity or expression, sexual orientation, marital status, status as a protected veteran, or any other legally protected group status.
