Manager, Product Security Engineering

Johnson Controls Fire Solutions is seeking a strategic and technical Manager, Product Security Engineering to lead the implementation and execution of engineering ownership and execution of product security across a global portfolio of fire detection and suppression across life safety product domains including embedded firmware, connected devices, cloud platforms, mobile applications, and digital services.

Responsible for defining and advancing the Fire Solutions product security execution strategy and roadmap in alignment with Global Cybersecurity standards and enterprise security objectives. The Manager will establish scalable security processes, lead cybersecurity risk and vulnerability management programs, drive application cyber regulation and corporate initiatives compliance, and develop an AI security threat response and governance capability.

The successful candidate will provide leadership across a complex global ecosystem of hardware, firmware, software, cloud, and IoT solutions, ensuring security is effectively integrated throughout the product lifecycle. This individual will translate cybersecurity requirements into practical engineering processes, improve security operational efficiency, and promote a culture of security ownership across the Fire Solution Engineering organization.

This position is critical to maintaining customer trust, meeting evolving cybersecurity expectations, supporting regulatory compliance initiatives, and ensuring the long-term success and resilience of the Fire Solutions business.

• Partner with Johnson Controls Enterprise Security to establish security governance, policies, standards, and risk management frameworks across the product portfolio.
• Serve as the senior engineering leader for product cybersecurity within Fire Solutions, partnering closely with Global Cybersecurity to operationalize security strategy, standards, governance, and risk management practices.
• Drive a culture of security-by-design, accountability, and continuous improvement throughout the organization.
• Serve as the lead security architect for Fire Solutions Engineering, providing guidance on secure architecture decisions across firmware, cloud, mobile, IoT, and enterprise-connected systems.
• Define and drive the engineering adoption of Dev Sec Ops  practices including automated security testing, software supply chain security, CI/CD security controls, secrets management, and approved developer security tooling in partnership with Global Cybersecurity.
• Develop reusable security patterns, reference architectures, training materials, and engineering guidance that enable teams to independently build secure products.

• Lead engineering adoption and execution of cybersecurity governance processes across the product development lifecycle.
• Partner with Regulatory Affairs, Quality, Legal, and Engineering teams to operationalize cybersecurity requirements associated with emerging regulations and industry standards.
• Translate regulatory cybersecurity requirements into scalable engineering processes, controls, documentation, and compliance evidence.
• Support audit readiness activities, security assessments, certifications, and regulatory reviews.
• Ensure cybersecurity requirements are integrated into product development, release, maintenance, and end-of-life processes.
• Monitor industry trends, emerging threats, and evolving cybersecurity requirements to continuously improve security capabilities.

• Drive adoption of secure development lifecycle (SSDLC) practices across hardware, firmware, software, cloud, mobile, and IoT product teams.
• Lead threat modeling, security architecture reviews, risk assessments, and security design reviews.
• Establish consistent security requirements for new product introductions and major platform enhancements.
• Oversee security testing programs, penetration testing activities, and security validation processes.
• Ensure security requirements are embedded throughout all phases of the product lifecycle.

• Establish and oversee global product vulnerability management processes.
• Lead coordinated vulnerability disclosure and external vulnerability response activities.
• Lead engineering coordination and remediation activities for product cybersecurity incidents in partnership with Global Cybersecurity incident response teams.
• Develop remediation prioritization…