information security engineer in building systems

Johnson Controls is a global leader in thermal management, mission-critical building systems, energy efficiency, and decarbonization. The company helps customers use energy more productively, reduce carbon emissions, and operate with precision and resilience in data centers, healthcare, pharmaceuticals, advanced manufacturing, and higher education.

• Design and implement enterprise-wide security reference architectures;
• Ensure alignment with global security standards and policies;
• Approve final designs and validate builds for compliance;
• Follow the Security Posture Assessment process, including research, validation, evaluation, and phase-gate reviews;
• Conduct security posture assessments for new initiatives;
• Identify and mitigate risks in third-party solutions;
• Ensure adherence to regulatory and internal security requirements;
• Partner with service management and stakeholders to gather requirements;
• Act as a trusted advisor to business units and IT teams;
• Provide expert input on security standards, roadmaps, and infrastructure;
• Create technical documentation, white papers, and presentations;
• Communicate complex security concepts to technical and non-technical audiences;
• Stay current on emerging threats, vulnerabilities, and technologies;
• Recommend improvements in network, identity, and infrastructure security.

• 3+ Years of experience in information security, including deploying security solutions and securing applications in a corporate environment;
• Strong understanding of attacker techniques, threat landscapes, vulnerability management, and security monitoring;
• Broad technical expertise in endpoint and platform security across Windows, Linux, and mobile;
• Experience with IAM, PKI, encryption/tokenization, and data protection;
• Experience with cloud security across AWS, Azure, and GCP;
• Experience with network security, including web proxies, reverse proxies, load balancing, IDS/IPS, firewalls, wireless, remote connectivity, TCP/IP, and remote access security techniques and products;
• Excellent written and verbal communication skills;
• Ability to work independently and collaboratively in a global team;
• High integrity and discretion when handling confidential matters;
• Nice to have: Bachelor’s degree in Computer Science, Engineering, or a related field or equivalent experience, familiarity with PCI-DSS, HIPAA, FISMA, and SOX, overview of NIST standards and security architecture frameworks such as SABSA and TOGAF, experience in security operations or incident analysis, CISSP, CISSP-ISSAP, CCSP, CISM, CISA, CEH, CCNA Security, CCNA, CCNP Security, CCNP, Microsoft or Linux server platform certifications.

• Initial basic salary of 16 000 to 25 000 PLN per month.