Director, Product Security & Cyber Strategy

jci; Westford (MA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Competitive salary

401K

Medical, dental, and vision care

Vacation/holidays/sick time

Job summary

Johnson Controls is seeking a strategic Director, Product Security & Security Strategy to lead cybersecurity across a global portfolio of Fire Solutions, including hardware, software, cloud, and IoT. You will shape security strategy, governance, and risk management in collaboration with Enterprise Security, Regulatory Affairs, Quality, Legal, and Operations.

You will drive multi-year roadmaps, establish security metrics, and ensure secure-by-design practices across the lifecycle while

Qualifications

• Extensive experience leading product security programs across hardware, firmware, software, cloud, and IoT.
• Strong track record in cybersecurity governance, risk management, and regulatory alignment.
• Ability to translate security requirements into scalable engineering processes.

Responsibilities

• Define and execute the Fire Solutions Product Security Strategy with governance and metrics.
• Lead CRA readiness and SBOM management across the product portfolio.
• Oversee vulnerability management, security testing, and incident response.
• Drive AI security governance, threat detection, and response playbooks.
• Partner with Enterprise Security, Legal, and Engineering to ensure security across lifecycle.
• Represent Johnson Controls in executive security discussions and customer engagements.

Skills

Security leadership

Cybersecurity strategy

Regulatory compliance

Threat modelling

SSDLC

Cross-functional collaboration

Vulnerability management

Job description

Johnson Controls is seeking a strategic Director, Product Security & Security Strategy to lead cybersecurity across a global portfolio of Fire Solutions, including hardware, software, cloud, and IoT. You will shape security strategy, governance, and risk management in collaboration with Enterprise Security, Regulatory Affairs, Quality, Legal, and Operations.

You will drive multi-year roadmaps, establish security metrics, and ensure secure-by-design practices across the lifecycle while