IT Tech Analyst II

What you will do:

· Assess entirety of Johnson Controls' internal and external attack surfaces, with special focus on assessing exposure of Johnson Controls' assets to vulnerabilities, misconfigurations, and other findings.

· Maintain vulnerability management and external attack surface platforms for both Product and Corporate teams, including defining scan schedules, analyzing agent deployments and coverage gaps, building reports, and creating dashboards, etc.

· Partner with operational teams to identify, prioritize, and communicate vulnerability details.

· Support various audits by ensuring adherence to documented process and providing supporting data as needed

· Periodically assess security policies, standards, baselines, procedures, and metrics to drive improvements that help Johnson Controls adapt to evolving regulatory, customer, and threat environments.
 

How you will do it:

· Exhibit knowledge in various exposure and vulnerability management platforms and concepts

· Establish relationships with operational stakeholders by assisting teams with vulnerability data, prioritization rationale, guidance on remediation steps, etc.

· Prepare stakeholder prioritization reports and data ahead of scheduled touchpoints. Ensure all relevant data is posted for archival. Participate in stakeholder meetings with focus on note taking and recording action items for follow-up.

· Lead emerging threat review process, monitoring for newly announced vulnerabilities and assessing impact to JCI with immediacy.

· Support audits by providing supporting data as needed

· Periodically assess security policies, standards, baselines, procedures, and metrics to drive improvements that help Johnson Controls adapt to evolving regulatory, customer, and threat environments.
 

What we look for:

· 2+ years of professional experience; Cyber security or Vulnerability management experience a plus

· Ability to follow and manage previously built, well-documented processes

· Attention to detail, ensuring that all necessary documentation/ artifacts are preserved to support audits

· Effective communication skills; focusing on delivering potentially complex technical details to non-technical stakeholders

· Ability to learn new tools and concepts quickly

· Demonstrated problem-solving skills to analyze customer cyber issues and requirements (regulatory, policy, customer, industry standard) and link to appropriate security controls.

JCI is an Equal Opportunity Employer and does not discriminate on the basis of any protected categories.