Manager - Zero Trust

About the role

Johnson Controls is looking for a Manager - Zero Trust in Bengaluru/Pune (APAC region). The role owns the Zero Trust strategy and roadmap, aligned to NIST SP 800-207 and the CISA Zero Trust Maturity Model, and drives the removal of implicit trust across identity, devices, networks, applications and data.

Key responsibilities

• Own the Zero Trust strategy and roadmap, and approve designs going to production
• Lead and grow a multi-disciplinary team through training, performance management and real delegation
• Deliver concurrent programs with sprint discipline, operational SLAs and audit readiness
• Act as the organisation's Zero Trust advocate with IT partners

Required profile

• 10+ years in cybersecurity (network security, identity, cloud or security architecture)
• 6+ years of direct people management, including hiring, development, performance, retention and succession
• Practical Zero Trust experience designing, implementing or leading initiatives in an enterprise
• Experience leading responses to high-severity security incidents and building or scaling teams across regions
• Ability to explain complex technical concepts to non-technical audiences and defend positions to senior leadership

Required skills

• Zero Trust frameworks (NIST SP 800-207, CISA maturity model) and domains such as ZTNA, microsegmentation, IAM, privileged access, conditional access, device trust and data protection
• Security strategy, architecture and roadmap ownership
• Preferred: Zero Trust certifications (e.g. CCZT), broader security/architecture certifications (CISSP, CCSP, CISM, GIAC, TOGAF), hands-on platform experience (Zscaler, Netskope, Guardicore, Illumio, Entra ID, Okta, SailPoint, Splunk, CSPM, IEC 62443, Python/PowerShell)