Sr. Manager NA Security Operations (Remote)

Build your best future with the Johnson Controls team

As a global leader in smart, healthy and sustainable buildings, our mission is to reimagine the performance of buildings to serve people, places and the planet. Join a winning team that enables you to build your best future! Our teams are uniquely positioned to support a multitude of industries across the globe. You will have the opportunity to develop yourself through meaningful work projects and learning opportunities. We strive to provide our employees with an experience, focused on supporting their physical, financial, and emotional wellbeing. Become a member of the Johnson Controls family and thrive in an empowering company culture where your voice and ideas will be heard – your next great opportunity is just a few clicks away!

What we offer

Competitive salary and bonus plan
Paid vacation/holidays/sick time
Comprehensive benefits package including 401K, medical, dental, and vision care - Available day one
Extensive product and on the job/cross training opportunities with outstanding internal resources
Encouraging and collaborative team environment
Dedication to safety through our Zero Harm policy
Check us Out: Day in the Life of the Building of the Future https://youtu.be/pdZMNrDJviY

What you will do

The Johnson Controls Global Cyber Security (GCS) team is undergoing a transformation and expansion as Johnson Controls increases its cybersecurity resources and capabilities in order to address the ever-changing cybersecurity threat landscape.  The successful candidate will be a Cybersecurity subject matter expert capable of partnering across functional disciplines to bring clarity to measurements and trends within and affecting the Information Security Risk landscape.  This role reports to the Director of Security Operations.  The candidate will be able to articulate thoughts clearly, plan initiatives, and execute with appropriate urgency. The candidate will demonstrate drive, intelligence, maturity, and energy and will be a proven change agent.  

How you will do it

• Own Incident Response and Incident Management process for North America

• Conduct continuous process improvement for the Incident Management Life Cycle and Incident Postmortem Process.

• Development and maturity of Incident Responses Playbooks and Runbooks

• Oversee Incident Response activities to ensure improvements to operational processes 

• Align incident management and problem resolution process with NIST framework and follow industry best practices.

• Collaborate with enterprise stakeholders to ensure that incidents are remediated/mitigated in a timely manner

• Collect, track, measure, and report Incident Response metrics and KPI data to JCI leadership 

• Oversee and contributes to Root Cause Analysis (RCA) reports detailing key insights from Incident Response activities and investigations

• Ensure that Incident Response Plans (IRPs) are regularly maintained and communicated to all relevant JCI parties

• Identify, evaluate, recommend, and implement processes, procedures, and tools to enhance existing Incident Response capabilities 

• Collaborate with the incident management team to ensure that all protocols are diligently followed

• Log all incidents and their resolution to see if there are recurring malfunctions

• Manage the incident team members by re-assigning workloads and re-scheduling non-urgent tasks

• Research and develop new digital forensics scripts, tools, and methodologies

• Collaborate with engineering and business stakeholders to share knowledge of Incident Status, Root Cause Analysis, postmortem follow ups, workarounds, and improvement strategies.

• Maintain and improve the Incident Management process by working with senior management across different engineering and business departments.

• Create and maintain required documentation (policies, standards, baselines, guidelines, and procedures)

What we look for

• Experience in the leadership and management of technical teams/individuals

• Advanced experience in threat detection and enterprise and cloud security

• Ability to recognize common attacker tools, tactics, and procedures

• Strong technical leadership and soft skills 

• Knowledge of Linux/UNIX and Windows OS Security 

• Computer intrusion analysis and incident response, intrusion detection, computer network surveillance/monitoring 

• Knowledge and understanding of network protocols, network devices, multiple operating systems, a