Manager - Zero Trust

YDU JC Air Cond & Ref Inc.- Dubai; India; On-site; INR 3,000,000 - 6,000,000; Full time

Job summary

Johnson Controls International plc. seeks a senior Manager – Zero Trust to own strategy and roadmap in an APAC India context, with Bengaluru/Pune operations.

You will drive measurable trust removal across identity, devices, networks, apps, and data, and lead a multi-disciplinary team through structured Zero Trust training and performance management. You will coordinate with IT partners to deliver programs with sprint discipline, audit readiness, and governance.

Qualifications

• 10+ years in cybersecurity across network security, identity, cloud or security architecture.
• 6+ years of direct people management with hiring, development and retention accountability.
• Practical Zero Trust experience leading enterprise initiatives and measuring outcomes.
• Strong grounding in Zero Trust frameworks including NIST SP 800-207 and related models.
• ZTNA/SSE/SASE, Microsegmentation, IAM, Privileged access, MFA, Device trust.
• Experience delivering security roadmaps from design through build and operation.
• Ability to review designs and defend technical positions to leadership.
• Experience leading high-severity incident responses across IT, legal and business teams.

Responsibilities

• Own the Zero Trust strategy and roadmap aligned to industry standards.
• Drive removal of implicit trust across identity, devices, networks, apps and data.
• Lead a multi-disciplinary team with training and performance management.
• Deliver concurrent programs with sprint discipline and audit readiness.
• Act as the organization's Zero Trust advocate with IT partners.

Skills

Zero Trust

Security Architecture

People management

Incident response

NIST SP 800-207

ZTNA/SSE/SASE

IAM

Data protection

Communication

Tools

Splunk

Job description

Job Code: Job Code Name: Business Title: Manager – Zero Trust Region: APAC – Bengaluru/Pune Country: India Grade: 175

What you will do

As Manager – Zero Trust, you will own the Zero Trust strategy and roadmap, aligned to NIST SP 800-207 and the CISA Zero Trust Maturity Model. You will drive measurable removal of implicit trust across identity, devices, networks, applications and data, and approve the designs that go to production. You will lead and grow a multi-disciplinary team through structured Zero Trust training, clear performance management and real delegation. You will deliver concurrent programs with sprint discipline, operational SLAs and audit readiness. You will also act as the organization's Zero Trust advocate with IT partners.

What we look for

Required

• 10+ years in cybersecurity, across network security, identity, cloud or security architecture, with meaningful hands-on depth rather than oversight only.
• 6+ years of direct people management. We mean line management with hiring, development, performance, retention and succession accountability, not technical leadership of a project team.
• Practical Zero Trust experience in role. You have designed, implemented or led Zero Trust initiatives in an enterprise, and can describe what you changed, how you measured it and what went wrong.
• Strong grounding in Zero Trust principles and frameworks, including NIST SP 800-207, the CISA Zero Trust Maturity Model or equivalent, and the judgment to apply them to a real, imperfect estate.
• Working knowledge across several Zero Trust domains:
  • ZTNA and SSE/SASE
  • Microsegmentation
  • Identity and access management
  • Privileged access
  • Conditional access and MFA
  • Device trust
  • Application and developer-environment access
  • Data protection
• Experience developing security strategies, architectures and roadmaps, and owning their delivery from design through build, operation and automation.
• Enough technical depth to credibly review and challenge designs from senior network and identity engineers.
• Experience leading the response to high‑severity security incidents. This means coordinating IT, legal and business teams through containment, remediation and post‑incident control improvement.
• Experience building or scaling a team, not only inheriting one, including managing across regions and planning capacity.
• Outstanding communication and presentation skills. You can explain complex technical concepts to non‑technical audiences and defend a technical position to senior leadership.

Preferred

• Zero Trust certification, such as the CSA Certificate of Competence in Zero Trust (CCZT), Forrester Zero Trust Strategist, or a vendor Zero Trust certification.
• Broader security or architecture certification, such as CISSP, CCSP, CISM, SANS (GIAC) or TOGAF.
• Hands‑on experience with leading Zero Trust platforms, for example:
  • SSE/ZTNA: Zscaler or Netskope
  • Microsegmentation: Guardicore or Illumio
  • Identity and IDaaS: Microsoft Entra ID, Okta, Ping Identity or Google Cloud Identity
  • Identity governance: SailPoint, Saviynt or equivalent
  • Privileged access management
• Network security background across on‑premises and cloud:
  • On‑premises: firewall policy and rule management, IDS/IPS, network access control, remote access VPN and internet proxies.
  • Cloud: cloud proxies, cloud web application firewall and API protection (WAF/WAAP), and Azure or GCP security services.
• Cloud security posture management across multi‑cloud environments (CSPM/CNAPP).
• Security operations experience, including SIEM tools such as Splunk for log analysis and event correlation, and risk‑based vulnerability management.
• AI security experience, either securing enterprise use of AI or applying AI to security operations.
• Exposure to OT and IoT security, including IEC 62443.
• Automation experience, such as Python, PowerShell, low‑code platforms or ITSM integration.
• Experience in a large, regulated enterprise with a legacy estate, M&A activity and real technical debt.
• Working knowledge of security and regulatory frameworks, such as NIST CSF, ISO/IEC 27001, SOX, PCI DSS, GDPR and HIPAA.

Johnson Controls International plc. is an equal employment opportunity and affirmative action employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, protected veteran status, genetic information, status as a qualified individual with a disability, or any other characteristic protected by law. For more information, please view EEO is the Law. If you are an individual with a disability and you require an accommodation during the application process, please visit www.johnsoncontrols.com/careers.

Johnson Controls: Enhancing the Intelligence of Buildings

Your buildings have a purpose. They are places for people to live or work. Facilities for learning or healing. Venues for entertainment and shopping. Sites for the specialized storage of tangible goods or mission‑critical data. Your buildings have a huge variety of functions; they are central to your mission. This is where Johnson Controls comes in, helping drive the outcomes that matter most. Through a full range of systems and digital solutions, we make your buildings smarter. A smarter building is safer, more comfortable, more efficient, and, ultimately, more sustainable. Most important, smarter buildings let you focus more intensely on your unique mission. Better for your people. Better for your bottom line. Better for the planet. At Johnson Controls, we’ve been making buildings smarter since 1885, and our capabilities, depth of innovation experience, and global reach have been growing ever since. Today, we offer the world’s largest portfolio of building products, technologies, software, and services; we put that portfolio to work to transform the environments where people live, work, learn and play.