Global Cyber Assurance & Compliance Lead

3304 Johnson Controls S.A. de C.V.; Ciudad de México; On-site; MXN 800,000 - 1,100,000; Full time

Job summary

Johnson Controls seeks a seasoned cyber assurance professional to drive ISO/IEC 27001 certification, SOC 2 engagements, and customer security audits across a global landscape. You will collaborate with Cybersecurity, IT, Legal, Sales, and regional teams to ensure evidence readiness and timely remediation.

Responsibilities include coordinating audits, collecting evidence, and supporting internal audit activities while maintaining centralized repositories and dashboards for continuous improvement.

Qualifications

• Bachelor’s degree in Information Security, Information Systems, Risk, Compliance, or a related field.
• 6-8 years of experience in information security compliance, audit support, or cyber risk management.
• Experience with ISO/IEC 27001, SOC 2 audits, and customer security assessments.

Responsibilities

• Support and coordinate global ISO/IEC 27001 certification activities including audit readiness and evidence collection.
• Lead preparation and responses for global customer cybersecurity audits and due diligence assessments.
• Support Internal Audit engagements related to information security and IT controls.
• Maintain centralized audit evidence repositories and dashboards to support global compliance.

Skills

ISO 27001

SOC 2

Audit coordination

Cross-functional

Governance & risk

Education

Bachelor’s degree in Information Security, Information Systems, Risk, Compliance, or a related field

Tools

AuditBoard

CrossComply

Job description

Johnson Controls seeks a seasoned cyber assurance professional to drive ISO/IEC 27001 certification, SOC 2 engagements, and customer security audits across a global landscape. You will collaborate with Cybersecurity, IT, Legal, Sales, and regional teams to ensure evidence readiness and timely remediation.

Responsibilities include coordinating audits, collecting evidence, and supporting internal audit activities while maintaining centralized repositories and dashboards for continuous improvement.