{"id":3408844,"url":"https://alion.io/job/johnson-controls-manager-vulnerability-management","title":"Manager -Vulnerability Management","company":{"id":448321,"name":"Johnson Controls","domain":"johnsoncontrols.com","url":"https://alion.io/company/johnsoncontrols-3","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":83,"open_postings":531,"ghost_share":0,"stale_share":0.669,"repost_share":0.009,"time_to_fill_p50_days":33,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Pune, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":18500,"max_usd":45000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":724},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Burp Suite","optional":false},{"name":"CVSS","optional":false},{"name":"ITSM","optional":false},{"name":"Jira","optional":false},{"name":"Nessus","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Rapid7 Insight","optional":false}],"status":"live","first_seen_at":"2026-10-28T17:03:10Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-10-30T02:39:37Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"What you will do:\nThe Johnson Controls Global Cyber Security (GCS) team is undergoing a transformation and expansion as Johnson Controls increases its cybersecurity resources and capabilities in order to address the ever-changing cybersecurity threat landscape.\nThe Sr. Vulnerability Analyst for Vulnerability Management will be responsible for overseeing and leading the vulnerability management program within the organization. This role involves identifying, evaluating, and mitigating security vulnerabilities across the company's IT infrastructure and applications. The ideal candidate will have a deep understanding of cybersecurity principles, strong leadership skills, and a proven track record of managing vulnerability management teams and programs. This role will report to the Sr. Manager Vulnerability Management.\nThe candidate will be able to articulate thoughts clearly, run operations, plan initiatives, and execute with appropriate urgency. The candidate will demonstrate drive, intelligence, maturity, and energy and will be a proven change agent.\nHow you will do it:\nDevelop and execute a comprehensive vulnerability management strategy aligned with the organization’s security objectives.\nLead and manage the vulnerability management team, providing guidance, mentorship, and professional development opportunities.\nCollaborate with cross-functional teams to integrate vulnerability management processes into the overall security program.\nOversee regular vulnerability assessments and penetration testing to identify potential security weaknesses.\nWork closely with IT and development teams to develop and implement effective remediation plans.\nCoordinate and/or perform regular Infrastuctural and Web Application vulnerability assessments;\nIdentify, and maintain the vulnerability management corporate platform in order to prompt identify weakness in the internal and external perimeter, including Cloud infrastructure;\nMonitor the identified security vulnerabilities or missconfiguration and support the IT stakeholders for remediation;\nEnforce VM processes and procedures to ensure also the right coverage and security of the Corporate Business Infrastructure and Web Applications;\nCollaborate with GIS teams to develop or optmize automations used for vulnerability tracking and reporting;\nSupport to adopt Secutiy best practices and security standards applied by the organization.\nWhat we look for:\nRequired\nMinimum 10 years working in Information Security and Security Operations area.\nKnowledge of industry best practices in Vulnerability Management and Compliance areas; (e.g. NIST and “CVSS - Common Vulnerability Scoring System” frameworks)\nExperience in management and configuration of vulnerability assessment platform (e.g Rapid7 Insight VM and AppSec, Nessus, Qualys VM and WAS, Burp Suite, ZAP)\nExperience with administration of ITSM solutions used for vulnerability tracking and reporting (Service Now SecOps VM Module/Jira)\nExperience with OWASP Top 10 assessment and methodology and CIS hardening standard;\nExperience with various cloud providers (Azure, Google, Amazon) and knowledge on methodology how to secure them;\nExperience on enforcement of VM operational Security process and procedures;\nExperience with penetration test assessment, red/blue team activities and security monitoring;\nExcellent verbal, written, and interpersonal communications skills, including the ability to communicate security concepts to both technical and non-technical audiences.\nDemonstrated ability to effectively facilitate and drive organizational change.\nStrong verbal and written communication skills.\nExcellent analytical, problem-solving, and decision-making skills.\nPreferred\nBachelor’s degree in computer engineering, computer security or computer science discipline;\nPrevious technical background in IT or Software development roles;\nExperience with management of Service NOW SecOps Vulnerability Response module.\nDesired Security certifications:\nCertified Information Systems Security Professional (CISSP)\nCertified Ethical Hacker (CEH)\nOffensive Security Certified Professional (OSCP)\nCompTIA Security+\nQualys Certified Specialist\nBurp Suite Certified Practitioner","description_format":"text","description_chars":4196,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Information Security","Vulnerability Management","Access Control & Alarm Systems"],"lifecycle":[{"event":"open","at":"2026-10-28T17:03:10Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":0,"expected_fill_days":33,"reasons":["conf:3","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/johnson-controls-manager-vulnerability-management","json_url":"https://alion.io/job/johnson-controls-manager-vulnerability-management.json","meta":{"generated_at":"2026-10-30T03:24:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4529,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":448321},"rest":"https://alion.io/mcp/rest/get_company?id=448321"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fjohnson-controls-manager-vulnerability-management"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fjohnson-controls-manager-vulnerability-management"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fjohnson-controls-manager-vulnerability-management"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/johnson-controls-manager-vulnerability-management\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fjohnson-controls-manager-vulnerability-management"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3408844}},{"tool":"search_jobs","arguments":{"company":"johnsoncontrols.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3408844},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}