Security Architect: Cloud & Compliance (Hybrid)

Johnson Controls, Inc.; Lisboa; Híbrido; EUR 104 000 - 138 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Hybrid work environment

Resumo da oferta

Johnson Controls, Inc. seeks an experienced Information Security Engineer to design and implement robust security architectures across the enterprise.

You will collaborate with cybersecurity, IT, and business teams to protect systems and data, guide secure deployments, and ensure compliance and risk mitigation. The role emphasizes security posture assessments, third-party risk reduction, and clear communication of complex concepts to both technical and non-technical audiences.

Qualificações

• 3+ years of information security experience in deploying security solutions in corporate environments.
• Strong understanding of attacker techniques, threat landscapes, vulnerability management, and security monitoring.
• Experience with security architecture and governance across cloud and on-premises environments.
• Familiarity with PCI-DSS, HIPAA, FISMA, SOX is preferred.

Responsabilidades

• Design and implement enterprise-wide security reference architectures.
• Assess security posture and mitigate risks in third-party solutions.
• Collaborate with service management, business units and IT teams to gather requirements and provide security guidance.
• Create high-quality technical documentation and communicate complex security concepts clearly.

Conhecimentos

Information security

Threat management

Cloud security

IAM / PKI

Network security

Security architecture

Communication skills

Independent work

Regulatory compliance

Formação académica

Bachelor’s degree in Computer Science or related field

Certifications: CISSP, CISSP-ISSAP, CCSP, CISM, CISA, CEH, CCNA/CCNP(Security)

Descrição da oferta de emprego

Johnson Controls, Inc. seeks an experienced Information Security Engineer to design and implement robust security architectures across the enterprise.

You will collaborate with cybersecurity, IT, and business teams to protect systems and data, guide secure deployments, and ensure compliance and risk mitigation. The role emphasizes security posture assessments, third-party risk reduction, and clear communication of complex concepts to both technical and non-technical audiences.