{"id":1964087,"url":"https://alion.io/job/johnson-controls-lead-cyber-certificacions-2","title":"Lead Cyber Certificacions","company":{"id":448321,"name":"Johnson Controls","domain":"johnsoncontrols.com","url":"https://alion.io/company/johnsoncontrols-3","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":85,"open_postings":752,"ghost_share":0.001,"stale_share":0.596,"repost_share":0.013,"time_to_fill_p50_days":22,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Mexico City, Mexico"],"countries":["MX"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":41000,"max_usd":104000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2403},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"SOC 2","optional":false},{"name":"FedRAMP","optional":true},{"name":"ISO 27001","optional":true}],"status":"live","first_seen_at":"2026-10-06T16:44:50Z","employer_posted_date":"2026-10-06","last_verified_at":"2026-10-22T00:07:53Z","board_verified":true,"closed_at":null,"days_open":15,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":15},"description":"Johnson Controls, a global leader in thermal management, mission-critical building systems, energy efficiency, and decarbonization, helps customers use energy more productively, reduce carbon emissions, and operate with the precision and resilience required in rapidly expanding industries such as data centers, healthcare, pharmaceuticals, advanced manufacturing, and higher education.\nFor more than 140 years, Johnson Controls has delivered performance where it really matters. Backed by advanced technology, lifecycle services and an industry-leading field organization, we elevate customer performance, turn goals into real-world results and help move society forward.\nWhat you will do\nIn this role, you will support and execute global cyber assurance activities, including ISO/IEC 27001 certification, SOC 2 reporting, customer cybersecurity audits, and Internal Audit support. You will coordinate audit readiness, manage evidence, track remediation, and help ensure consistent execution of cyber compliance requirements across a global environment. You will also serve as a key North America point of contact, partnering with regional stakeholders while aligning to global processes and leadership direction.\nYou will partner closely with Cybersecurity, IT, Internal Audit, Legal, Sales, and other stakeholders to coordinate audits and assessments, respond to evidence requests, and support timely closure of findings and corrective actions.\nHow you will do it\nCyber certifications & external assessments\nSupport and coordinate global ISO/IEC 27001 certification activities, including audit readiness, evidence collection, internal audit support, and remediation tracking, while proactively managing expectations with business sponsors and 1st Line teams.\nParticipate in SOC 2 Type I and Type II engagements, including control walkthroughs, evidence preparation, and auditor interactions.\nServe as a day-to-day liaison with external auditors and certification bodies under the direction of compliance leadership.\nMaintain audit documentation and support ongoing control maturity efforts.\nCustomer audits & security assessments\nLead preparation and responses for global customer cybersecurity audits and due diligence assessments, including questionnaires and evidence requests related to ISO, SOC, and information security controls.\nCoordinate with Sales, Legal, and IT teams to provide accurate, consistent, and risk aligned customer responses.\nTrack customer audit findings and support remediation and follow-up activities.\nInternal Audit support\nSupport Internal Audit engagements related to information security and IT controls, including walkthroughs, evidence coordination, and issue tracking.\nAssist with documenting audit findings, management responses, and remediation plans.\nEnsure alignment between internal audit activities and external certification and assurance requirements.\nCompliance operations & continuous improvement\nMaintain centralized audit evidence repositories, trackers, and dashboards to support repeatable global compliance processes.\nSupport the use of AuditBoard or similar GRC platforms for audit management, issue tracking, and evidence coordination.\nIdentify opportunities to improve efficiency and consistency across certification, audit, and assessment activities globally.\nRequired Qualifications\nBachelor’s degree in Information Security, Information Systems, Risk, Compliance, or a related field.\n6-8 years of experience in information security compliance, audit support, or cyber risk management.\nPractical experience with multiple of the following: ISO/IEC 27001 certification (execution or support)SOC 2 Type I or Type II reportsCustomer security audits or third-party assessmentsInternal Audit support, including ITGCs or security related controls\nExperience working with cross functional and global stakeholders.\nStrong organizational skills with the ability to manage multiple audits and deadlines simultaneously.\nPreferred Qualifications\nExperience supporting global audit and certification programs, including coordination across regions.\nFamiliarity with security and control frameworks/standards such as ISO 27001, NIST, SCF, PCI, FedRAMP, and/or CMMC.\nExperience using AuditBoard, including CrossComply, for audit management, evidence collection, issue tracking, and reporting (strong plus).\nInternal Audit and/or External Audit experience (e.g., ITGCs, SOX scoping support, security controls testing, or assurance reporting).\nProfessional certifications such as CISA, CISSP, CRISC, or ISO 27001 Lead Implementer/Auditor (preferred, not required).\nKey Competencies (JCI-aligned)\nTeam player with a collaborative, approachable working style; able to partner effectively across Information Security, IT, Internal Audit, Legal, Sales, and regional teams.\nDemonstrates a global mindset and cultural awareness; able to bridge global teams and North America engagements.\nIntegrity and accountability in handling sensitive information and audit outcomes.\nCustomer/stakeholder focus; communicates clearly and delivers timely, high-quality responses during audits and assessments.\nResults orientation; able to manage competing priorities, deadlines, and multiple audits in parallel.\nAudit coordination and evidence management; disciplined, organized, and process-driven.\nRisk and control awareness; understands how requirements map to controls and operational execution.\nContinuous improvement; proactively identifies opportunities to streamline, standardize, and automate compliance activities.\nAttention to detail and strong documentation practices.\nJohnson Controls does not request pregnancy or HIV testing as a condition for hiring, continued employment, or promotion, in accordance with its commitment to labor equality and non-discrimination.","description_format":"text","description_chars":5796,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Energy & Utilities","Energy Efficiency","Information Security","Smart City"],"lifecycle":[{"event":"open","at":"2026-10-06T16:44:50Z"}],"visa":[],"liveness":{"score":56,"band":"ok","label":"Likely open","p_open":1,"p_active":0.618,"p_room":0.9,"age_days":14,"expected_fill_days":22,"reasons":["conf:1","stale_co","wave","velocity","win:mid","comp:brand"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/johnson-controls-lead-cyber-certificacions-2","json_url":"https://alion.io/job/johnson-controls-lead-cyber-certificacions-2.json","meta":{"generated_at":"2026-10-22T02:05:55Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1485,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":448321},"rest":"https://alion.io/mcp/rest/get_company?id=448321"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fjohnson-controls-lead-cyber-certificacions-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fjohnson-controls-lead-cyber-certificacions-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fjohnson-controls-lead-cyber-certificacions-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/johnson-controls-lead-cyber-certificacions-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fjohnson-controls-lead-cyber-certificacions-2"}]}