Information Security Engineer

About the role

Johnson Controls is looking for an Information Security Engineer to join its Global Information Security team. You will work closely with cybersecurity, IT, and business stakeholders to design, implement, and validate security architectures that protect the company’s systems and data.

Key responsibilities

• Develop and maintain enterprise‑wide security reference architectures aligned with global standards.
• Conduct security posture assessments for new initiatives and third‑party solutions.
• Validate designs and builds for compliance with regulatory and internal requirements.
• Partner with service management and business units to gather requirements and provide security consulting.
• Create technical documentation, white papers, and presentations for both technical and non‑technical audiences.
• Stay current on emerging threats, vulnerabilities, and technologies and recommend improvements.

Required profile

• Minimum 3 years of experience in information security and security applications.
• Strong knowledge of attacker techniques, threat landscapes, vulnerability management, and security monitoring.
• Ability to work independently and collaboratively in a global team.
• High integrity and discretion when handling confidential information.

Required skills

• Endpoint and platform security (Windows, Linux, mobile).
• Identity and Access Management (IAM), PKI, encryption, tokenization, data protection.
• Cloud security (AWS, Azure, GCP).
• Network security (web proxies, reverse proxies, load balancing, IDS/IPS, firewalls, wireless, remote connectivity, TCP/IP, remote‑access security).
• Familiarity with compliance frameworks (PCI‑DSS, HIPAA, FISMA, SOX) and NIST, SABSA, TOGAF standards.