Lead Cyber Certificacions

Johnson Controls; Región Centro; Presencial; MXN 900.000 - 1.200.000; Jornada completa

Descripción de la vacante

Johnson Controls seeks a senior professional to support and execute global cyber assurance activities, including ISO/IEC 27001 and SOC2, across a multinational environment. You will coordinate audit readiness, evidence collection, and remediation tracking while collaborating with Cybersecurity, IT, Internal Audit, Legal, and Sales.

You will serve as a North America liaison and align with global processes, driving timely closure of findings and continuous improvement across certification

Formación

• Bachelor's degree in Information Security, Information Systems, Risk, Compliance, or a related field.
• 6-8 years of experience in information security compliance, audit support, or cyber risk management.
• Experience with ISO/IEC27001 certification, SOC2 reports, customer security audits, and ITGCs or related controls.
• Experience working with cross functional and global stakeholders.
• Strong organizational skills to manage multiple audits and deadlines.

Responsabilidades

• Support and coordinate global ISO/IEC27001 certification activities including audit readiness, evidence collection, internal audit support, and remediation tracking.
• Participate in SOC2 Type I and II engagements, including control walkthroughs and evidence preparation.
• Serve as liaison with external auditors and certification bodies under compliance leadership direction.
• Lead preparation and responses for global customer cybersecurity audits and due diligence assessments.
• Coordinate with Sales, Legal, and IT teams to provide accurate, consistent, risk-aligned responses.
• Maintain centralized audit evidence repositories and dashboards for repeatable global processes.

Conocimientos

ISO27001

SOC2

Audit coordination

Cross-functional collaboration

InfoSec governance

Educación

Bachelor's degree in Information Security/Information Systems/Risk

Herramientas

AuditBoard

Descripción del empleo

Johnson Controls, a global leader in thermal management, mission-critical building systems, energy efficiency, and decarbonization, helps customers use energy more productively, reduce carbon emissions, and operate with the precision and resilience required in rapidly expanding industries such as data centers, healthcare, pharmaceuticals, advanced manufacturing, and higher education.

For more than 140 years, Johnson Controls has delivered performance where it really matters. Backed by advanced technology, lifecycle services and an industry-leading field organization, we elevate customer performance, turn goals into real-world results and help move society forward.

What you will do

In this role, you will support and execute global cyber assurance activities, including ISO/IEC 27001 certification, SOC2 reporting, customer cybersecurity audits, and Internal Audit support. You will coordinate audit readiness, manage evidence, track remediation, and help ensure consistent execution of cyber compliance requirements across a global environment. You will also serve as a key North America point of contact, partnering with regional stakeholders while aligning to global processes and leadership direction. You will partner closely with Cybersecurity, IT, Internal Audit, Legal, Sales, and other stakeholders to coordinate audits and assessments, respond to evidence requests, and support timely closure of findings and corrective actions.

How you will do it

Cyber certifications & external assessment s

• Support and coordinate global ISO/IEC27001 certification activities , including audit readiness, evidence collection, internal audit support, and remediation tracking, while proactively managing expectations with business sponsors and 1st Line teams.
• Participate in SOC2 Type I and Type II engagements , including control walkthroughs, evidence preparation, and auditor interactions.
• Serve as a day-to-day liaison with external auditors and certification bodies under the direction of compliance leadership.
• Maintain audit documentation and support ongoing control maturity efforts.

Customer audits & security assessments

• Lead preparation and responses for global customer cybersecurity audits and due diligence assessments , including questionnaires and evidence requests related to ISO, SOC, and information security controls.
• Coordinate with Sales, Legal, and IT teams to provide accurate, consistent, and risk aligned customer responses.
• Track customer audit findings and support remediation and follow-up activities.

Internal Audit support

• Support Internal Audit engagements related to information security and IT controls, including walkthroughs, evidence coordination, and issue tracking.
• Assist with documenting audit findings, management responses, and remediation plans.
• Ensure alignment between internal audit activities and external certification and assurance requirements.

Compliance operations & continuous improvement

• Maintain centralized audit evidence repositories, trackers, and dashboards to support repeatable global compliance processes.
• Support the use of AuditBoard or similar GRC platforms for audit management, issue tracking, and evidence coordination.
• Identify opportunities to improve efficiency and consistency across certification, audit, and assessment activities globally.

Required Qualifications

• Bachelor's degree in Information Security, Information Systems, Risk, Compliance, or a related field.
• 6-8 years of experience in information security compliance, audit support, or cyber risk management.
• Practical experience with multiple of the following: ISO/IEC27001 certification (execution or support)SOC2 Type I or Type II reportsCustomer security audits or third-party assessmentsInternal Audit support , including ITGCs or security related controls
• Experience working with cross functional and global stakeholders.
• Strong organizational skills with the ability to manage multiple audits and deadlines simultaneously.

Preferred Qualifications

• Experience supporting global audit and certification programs , including coordination across regions.
• Familiarity with security and control frameworks/standards such as ISO27001 , NIST , SCF , PCI , FedRAMP , and/or CMMC .
• Experience using AuditBoard , including CrossComply , for audit management, evidence collection, issue tracking, and reporting ( strong plus ).
• Internal Audit and/or External Audit experience (e.g., ITGCs, SOX scoping support, security controls testing, or assurance reporting).
• Professional certifications such as CISA, CISSP, CRISC, or ISO27001 Lead Implementer/Auditor (preferred, not required).

Key Competencies (JCI-aligned)

• Team player with a collaborative, approachable working style; able to partner effectively across Information Security, IT, Internal Audit, Legal, Sales, and regional teams.
• Demonstrates a global mindset and cultural awareness; able to bridge global teams and North America engagements.
• Integrity and accountability in handling sensitive i