JOB DESCRIPTION:

About Abbott

Abbott is a global healthcare leader, creating breakthrough science to improve people’s health. We’re always looking towards the future, anticipating changes in medical science and technology.

Working at Abbott

At Abbott, you can do work that matters, grow, and learn, care for yourself and family, be your true self and live a full life. You will have access to:

• Career development with an international company where you can grow the career you dream.
• A company recognized as a great place to work in dozens of countries around the world and named one of the most admired companies in the world by Fortune.
• A company that is recognized as one of the best big companies to work for as well as a best place to work for diversity, working mothers, female executives, and scientists.

The Opportunity

The Auditor, Global Technology Audit and Assurance is responsible for assessing the adequacy of Global Technology security and controls for applications and infrastructure throughout Abbott’s international and domestic organizations. The IT auditor will execute audit projects using a risk-based approach to help ensure effective testing coverage.  They will identify control gaps and other areas of risk exposure related to controls within IT and OT processes and deliver achievable, meaningful recommendations for management to mitigate the identified risks.

The individual should have the demonstrated ability to communicate effectively, present professionally, and work well with the highest level of Corporate and Division management as well as his/her peer group.

What You’ll Do:

• Execute Information Systems audits throughout Abbott's international and domestic organizations.
• Assess the design and development of security solutions and their adherence to applicable policies and comply with information security requirements.
• Prepare and present audit findings to senior management.
• Maintain comprehensive historical audit work paper documentation that fully supports reported audit results, leveraging established department tools and standards.
• Proactively communicate with key stakeholders regarding audit status, findings and other relevant issues.
• Stay abreast of current and emerging security risks.  Research new technologies, understand existing processes, and reference recognized standards and frameworks.
• Work collaboratively with others on the Corporate Audit team to proactively assess organizational IT risks and ensure effective audit coverage.
• Identify control gaps and other areas of heightened risk exposure related to governance, risk management and internal controls within IT processes.
• Design and deliver achievable meaningful recommendations for management to mitigate the identified risks.

Required Qualifications:

• BA/BS degree in Business, Computer Science, Management Information Systems or related field, or equivalent practical experience.
• 1.5-3+ years of related experience with a top-tier consulting or public accounting firm in one of the following two areas required:
• Execution of Information Systems audits, including Application, Platform or General IT and OT Controls; or conducting information security assessments or implementing information security controls.
• Strong interpersonal and communication skills are required.
• 0-20% travel to Abbott's International and Domestic locations required.

Preferred Qualifications:

• Experience with auditing major ERP systems (i.e. SAP)
• Experience with auditing IaaS, PaaS, SaaS services and solutions
• Experience with SOX audits and compliance requirements
• Deep insight of best practice standards and frameworks, such as ISO 27001/2 and NIST.
• Understanding of network and system security technology and practices across major-computing areas.
• Experience with Technology Risk Management / IT Audit function in Enterprise organizations.
• Certifications such as HCISPP, CHPS, CISA, CISSP, CISM, CRISC, CIPP.
• Manufacturing and/or international business experience.
• Foreign language skills.

The base pay for this position is

In specific locations, the pay range may vary from the range posted.

JOB FAMILY:

DIVISION:

LOCATION:

ADDITIONAL LOCATIONS:

WORK SHIFT:

TRAVEL:

MEDICAL SURVEILLANCE:

SIGNIFICANT WORK ACTIVITIES: