Senior IT Compliance Analyst

What you will do

We are seeking a skilled Senior Compliance Analyst to join our Global Cybersecurity Governance, Risk, and Compliance (GRC) team. In this role, you will support our compliance program, ensuring regulatory adherence, internal policy compliance, and effective risk management . This opportunity is ideal for a compliance professional who thrives in a dynamic environment and is passionate about fostering a culture of integrity and accountability.

How you will do it

Coordinate and support internal and external audits , including gathering evidence and tracking remediation.

Conduct compliance reviews and control testing to verify adherence to policies and regulatory requirements.

Design and deliver compliance training programs to cultivate a culture of compliance and ethical conduct.

Offer guidance and support to business units on compliance-related issues.

Ensure timely and accurate reporting to regulatory bodies and internal stakeholders.

Assist in the configuration, maintenance, and optimization of GRC platforms and tools.

Develop dashboards and reports to provide insights into compliance and risk metrics.

Collaborate with Governance and Risk Management teams to ensure effective GRC delivery.

What we look for

Required

Demonstrated expertise in Governance, Risk, Compliance (GRC), IT Audit, and Information Security , with substantial experience in international corporate environments.

Proficient in conducting compliance assessments, audits, and business process reviews .

Skilled in developing formal compliance documentation and deliverables tailored to diverse stakeholder needs.

Familiarity with frameworks such as SOX and ISO 27001 .

Excellent teamwork abilities, fostering collaboration across cross-functional teams while appreciating diverse perspectives.

Consultative approach with the ability to effectively advise both technical and non-technical stakeholders on risk mitigation and compliance strategies.

Preferred

CISA (Certified Information Systems Auditor), CISM (Certified Information Security Manager), CISSP (Certified Information System Security Professional) or similar industry certification.

Experience working with frameworks NIST, PCI DSS, etc.

Our culture

At Johnson Controls you’ll have the opportunity to work on some of the most exciting projects in today’s market. Our hardworking people empower us, and we believe in being part of a team that is open, collaborative, results-oriented, hardworking and above all fun.

We believe that diversity and inclusion matter and make a difference. By embracing the true value of diversity and inclusion, getting comfortable with having crucial conversations, and valuing different perspectives, we will be one of the most desirable places to work.

LI-BB1

LI-Hybrid