Manager - Zero Trust
Johnson Controls (company site, opens in a new tab)10+ yrsBengaluruOn-siteDirect career pageEst. 30–45 LPA
Posted 15h ago
Reach people at Johnson Controls
People at this company you can reach
Log in to see who works here
Create a free account or log in to see the people at Johnson Controls you could write to:
- Recruiters & HR
- People in this function
- Work addresses
Your match
Against your primary resume
Log in to see your match score
Create a free account or log in to unlock your CV match score across:
- Role fit
- Experience
- Industry relevance
Protocol Intelligence
How competitive this role is
Competition
Background fit
Strictness
Log in to see why each signal reads the way it does.
Job description
Structured overview of role & requirements
About This Role
- Own and execute the Zero Trust strategy and roadmap aligned to NIST SP 800-207 and CISA models.
- Lead a multi-disciplinary team with structured training, performance management, and delegation.
- Deliver concurrent Zero Trust programs adhering to operational SLAs, sprint discipline, and audit readiness; act as the organization's Zero Trust advocate with IT partners.
Minimum Requirements
- 10+ years hands-on cybersecurity experience in network security, identity, cloud, or security architecture.
- 6+ years direct line management experience with hiring, development, retention, and succession responsibilities.
- Practical, documented Zero Trust initiative experience including design, implementation, measurement, and troubleshooting.
- Strong knowledge of Zero Trust frameworks (NIST SP 800-207, CISA Zero Trust Maturity Model) and multiple Zero Trust domains (ZTNA, microsegmentation, IAM, privileged access, device trust, etc.).
Ideal Candidate Profile
- Experience designing and delivering security strategies and roadmaps with technical depth to review senior engineers' designs.
- Proven ability to lead high-severity incident response coordinating IT, legal, and business teams end-to-end.
- Demonstrated success building and scaling multi-regional teams and communicating complex security concepts to non-technical and senior leadership audiences.