Director Security Engineering

Johnson Controls; Westford (MA); On-site; USD 180,000 - 280,000; Full time

Benefits offered by this job

Competitive salary

Paid vacation/holidays/sick time

Comprehensive benefits: 401K/medical/d

Vision care

On‑the‑job/cross‑training

Collaborative team environment

Zero Harm safety policy

Job summary

Johnson Controls Fire Solutions seeks a Director to lead cybersecurity strategy and governance for a global portfolio of fire detection, suppression, and connected devices. You’ll drive risk management, regulatory alignment, and secure development practices across hardware, software, cloud, and IoT solutions.

You will partner with Enterprise Security, Regulatory Affairs, Legal, and Engineering to advance security maturity, ensure compliance, and promote rapid, secure product delivery worldwide.

Qualifications

• Proven ability to define and execute product security strategy across a global portfolio.
• Experience partnering with cross‑functional teams (Engineering, Legal, Regulatory, Quality).
• Strong track record in regulatory compliance and security risk management.

Responsibilities

• Define and execute the Fire Solutions Product Security Strategy.
• Lead security governance, policies, standards, and risk frameworks across the portfolio.
• Drive CRA readiness, vulnerability management, and SBOM governance.
• Translate cybersecurity requirements into scalable engineering processes and documentation.
• Foster security ownership and a culture of secure‑by‑design across teams.

Skills

Strategic leadership

Security governance

Regulatory compliance

Risk management

Vulnerability management

Cyber resilience

SBOM management

AI security strategy

Job description

Build your best future with the Johnson Controls team!

Who we are:

Johnson Controls is global leader in smart, healthy, and sustainable buildings. Our mission is to reimagine the performance of buildings to serve people, places, and the planet. Join a winning team that enables you to build your best future! Our teams are uniquely positioned to support a multitude of industries across the globe. You will have the opportunity to develop yourself through meaningful work projects and learning opportunities. We strive to provide our employees with an experience focused on supporting their physical, financial, and emotional wellbeing. Become a member of the Johnson Controls family and thrive in an empowering company culture where your voice and ideas will be heard - your next great opportunity is just a few clicks away!

What We Offer:

• Competitive salary
• Paid vacation/holidays/sick time
• Comprehensive benefits package including 401K, medical, dental, and vision care.
• On-the-job/cross-training opportunities
• Encouraging and collaborative team environment
• Dedication to safety through our Zero Harm policy

Position Summary

Johnson Controls Fire Solutions is seeking a strategic and influential Director, Product Security & Security Strategy to lead the cybersecurity vision, governance, and execution framework across a global portfolio of fire detection, suppression, life safety, connected devices, cloud platforms, mobile applications, and digital services.

This critical leadership role will be responsible for defining and advancing the Fire Solutions product security strategy while partnering closely with Enterprise Security, Engineering, Product Management, Regulatory Affairs, Quality, Legal, and Operations organizations. The Director will establish scalable security processes, lead cybersecurity risk and vulnerability management programs, drive Cyber Resilience Act (CRA) readiness and execution, and develop the organization's AI security threat response and governance capabilities.

The successful candidate will provide leadership across a complex global ecosystem of hardware, firmware, software, cloud, and IoT solutions, ensuring security is effectively integrated throughout the product lifecycle. This individual will translate cybersecurity requirements into practical engineering processes, improve security operational efficiency, and promote a culture of security ownership across the organization.

This position is critical to maintaining customer trust, meeting evolving cybersecurity expectations, supporting regulatory compliance initiatives, and ensuring the long‑term success and resilience of the Fire Solutions business.

Key Responsibilities

Product Security Strategy & Leadership

• Define and execute the Fire Solutions Product Security Strategy aligned with business objectives, customer expectations, and enterprise cybersecurity standards.
• Partner with Johnson Controls Enterprise Security to establish security governance, policies, standards, and risk management frameworks across the product portfolio.
• Serve as the senior product security leader for Fire Solutions and provide strategic cybersecurity guidance to business and engineering leadership.
• Develop multi-year security roadmaps focused on improving product security maturity, resilience, and operational effectiveness.
• Establish security metrics, KPIs, and executive reporting mechanisms to measure program effectiveness and risk reduction.
• Drive a culture of security‑by‑design, accountability, and continuous improvement throughout the organization.

Security Governance & Compliance Execution

• Lead the implementation of cybersecurity governance processes across the product development lifecycle.
• Partner with Regulatory Affairs, Quality, Legal and Engineering teams to operationalize cybersecurity requirements associated with emerging regulations and industry standards.
• Translate regulatory cybersecurity requirements into scalable engineering processes, controls, documentation, and compliance evidence.
• Support audit readiness activities, security assessments, certifications, and regulatory reviews.
• Ensure cybersecurity requirements are integrated into product development, release, maintenance, and end‑of‑life processes.
• Monitor industry trends, emerging threats, and evolving cybersecurity requirements to continuously improve security capabilities.

Cyber Resilience Act (CRA) Leadership

• Secure development practices
• Vulnerability management
• Coordinated vulnerability disclosure
• Software Bill of Materials (SBOM) management
• Security documentation
• Post-release monitoring and response