Senior Manager, Governance - Cybersecurity GRC

What you will do

• Develop and execute forward‑thinking cybersecurity governance strategies that elevate our security posture and drive organizational excellence.
• Design, implement, and maintain a robust governance program—documenting, communicating, and enforcing policies, standards, and guidelines that align with business objectives.
• Serve as a subject matter expert, educating and guiding technology teams and business partners on cyber governance requirements and best practices.
• Engage with internal and external auditors; facilitate assessments and audits, ensuring timely responses and adherence to Johnson Controls policies and standards.
• Lead coordination across cross‑functional teams to deliver cybersecurity training and awareness initiatives, reinforcing adherence to governance policies.
• Collaborate with cross‑functional teams to evaluate cyber controls, map them to program key performance indicators, and assess compliance.
• Report on the effectiveness of governance initiatives, using data‑driven insights to inform continuous improvement.
• Ensure our governance framework meets evolving compliance requirements and incorporates stakeholder input and industry benchmarks.
• Foster collaboration through partnership with cybersecurity leaders and cross‑functional teams to refine processes, develop key performance indicators, and promote organizational cyber maturity.
• Implement process enhancements using automation tools and agile methodologies to boost productivity and efficiency.
• Monitor and interpret evolving regulatory requirements and industry best practices to inform governance enhancements.
• Build and lead a high‑performing team; mentor and develop cybersecurity professionals, fostering growth, innovation, and a shared commitment to excellence.
• Participate in relevant cybersecurity committees and working groups.

• Bachelor's degree in Cybersecurity, Information Technology, or a related field.
• 8+ years of experience in cybersecurity governance, risk management, or compliance—especially in building and leading governance frameworks that make a difference.
• Proven track record of leading high‑performing teams and delivering results with autonomy, accountability, and a collaborative spirit.
• Deep expertise in industry frameworks, regulations, and laws such as ISO, NIST, PCI, GDPR, and CRA, plus the ability to translate complex requirements into practical solutions.
• Experience navigating both legacy and emerging technologies to manage business risk and enforce robust security controls.
• Exceptional communication and interpersonal skills, with the ability to build trust, minimize friction, and engage effectively with stakeholders at every level.
• Demonstrated success in managing multiple initiatives and delivering on schedule using agile methodologies and tools (e.g., Scrum/Kanban, Jira).
• Strong critical thinking and problem‑solving skills, with a knack for distilling complex requirements into actionable strategies.
• Experience leading distributed and hybrid teams, fostering a culture of inclusion and continuous improvement.

• Industry
  
  Certifications:
  
  Credentials such as CISSP, CISM, CISA, CRISC, or other certifications in cybersecurity governance that demonstrate your commitment to excellence and continuous learning.
• Operational Technology Savvy:
  Experience with cybersecurity controls for operational technologies (e.g., Control Systems or Building Management) will help you make an even greater impact in our diverse environment.
• Global Perspective:
  Experience in a global organization and navigating multi‑regional compliance requirements will enable you to thrive in our dynamic, international team.
• If you're passionate about cybersecurity and eager to grow in a collaborative, forward‑thinking environment, we encourage you to apply—even if you don't meet every preferred qualification. Your unique perspective and drive could be exactly what we need!

HIRING SALARY RANGE: $126, (Salary to be determined by the education, experience, knowledge, skills, and abilities of the applicant, internal equity, location, and alignment with market data.) This role offers a competitive bonus plan that will take into account individual, group, and corporate performance. This position includes a competitive benefits package. For details, please visit the About Us tab on the Johnson Controls Careers site at