Director, Product Security & Strategy

Johnson Controls; Westford (MA); On-site; USD 180,000 - 280,000; Full time

Benefits offered by this job

Competitive salary

Paid vacation/holidays/sick time

Comprehensive benefits: 401K/medical/d

Vision care

On‑the‑job/cross‑training

Collaborative team environment

Zero Harm safety policy

Job summary

Johnson Controls Fire Solutions seeks a Director to lead cybersecurity strategy and governance for a global portfolio of fire detection, suppression, and connected devices. You’ll drive risk management, regulatory alignment, and secure development practices across hardware, software, cloud, and IoT solutions.

You will partner with Enterprise Security, Regulatory Affairs, Legal, and Engineering to advance security maturity, ensure compliance, and promote rapid, secure product delivery worldwide.

Qualifications

• Proven ability to define and execute product security strategy across a global portfolio.
• Experience partnering with cross‑functional teams (Engineering, Legal, Regulatory, Quality).
• Strong track record in regulatory compliance and security risk management.

Responsibilities

• Define and execute the Fire Solutions Product Security Strategy.
• Lead security governance, policies, standards, and risk frameworks across the portfolio.
• Drive CRA readiness, vulnerability management, and SBOM governance.
• Translate cybersecurity requirements into scalable engineering processes and documentation.
• Foster security ownership and a culture of secure‑by‑design across teams.

Skills

Strategic leadership

Security governance

Regulatory compliance

Risk management

Vulnerability management

Cyber resilience

SBOM management

AI security strategy

Job description

Johnson Controls Fire Solutions seeks a Director to lead cybersecurity strategy and governance for a global portfolio of fire detection, suppression, and connected devices. You’ll drive risk management, regulatory alignment, and secure development practices across hardware, software, cloud, and IoT solutions.

You will partner with Enterprise Security, Regulatory Affairs, Legal, and Engineering to advance security maturity, ensure compliance, and promote rapid, secure product delivery worldwide.