Analyst Information Security
Quick Summary
What you will do This role supports and improves the company’s information security and compliance program. You’ll manage Governance, Risk & Compliance (GRC) tools, automate compliance processes,
Responsibilities
~1 min readThis role supports and improves the company’s information security and compliance program. You’ll manage Governance, Risk & Compliance (GRC) tools, automate compliance processes, and work with IT, Security, and Audit teams to strengthen controls and support audits.
- Manage and maintain GRC/compliance tools used for control monitoring, evidence collection, risk assessments, and issue tracking.
- Automate compliance workflows, integrate tools with systems like IAM and ticketing, and create dashboards and reports.
- Support security controls aligned with ISO 27001, SOC 2, PCI DSS, and IT General Controls.
- Translate audit and compliance requirements into tooling workflows and support audit evidence collection and traceability.
- Work with IT Compliance, Risk, Security, and Engineering teams to define controls and improve processes.
- Clearly communicate requirements and status to both technical and non‑technical stakeholders.
- Handle daily administration of compliance tools, including access, configuration, and data quality.
- Troubleshoot tool issues and maintain documentation, configurations, and standard operating procedures (SOPs).
- Define and enforce standards for compliance evidence (naming, retention, versioning).
- Ensure evidence is accurate, complete, and audit‑ready.
- Experience in IT Compliance, IT Audit, or Information Security.
- Understanding of IT controls, risk management, or compliance frameworks.
- Experience with supporting automation (e.g., workflow automation, scripting, integrations, or reporting).
- Familiarity with GRC or related tools (e.g., ServiceNow GRC, OneTrust, Jira, SIEM/SOAR, IAM platforms).
- Ability to turn compliance requirements into technical solutions.
Nice to Have
~1 min read- Experience with AuditBoard (CrossComply) or similar GRC platforms for control management, evidence collection, and audit workflows.
- Exposure to SOX ITGC, SOC 1/2, or ISO 27001.
- Reporting and analytics skills (Power BI, Excel).
- Scripting or automation experience (Python, PowerShell, APIs).
- Relevant certifications (CISA, CISSP, CRISC, ISO 27001).
What We Offer
~1 min readThe initial basic salary for this position will be in the range of €2,430 – €3,807 per month, plus a 13th month salary applied after your first 6 months in the job. The final package will reflect your experience, skills, and qualifications relevant to the role. We are committed to fair, equitable, and gender-neutral pay practices.
Johnson Controls, a global leader in thermal management, mission-critical building systems, energy efficiency, and decarbonization, helps customers use energy more productively, reduce carbon emissions, and operate with the precision and resilience required in rapidly expanding industries such as data centers, healthcare, pharmaceuticals, advanced manufacturing, and higher education.
For more than 140 years, Johnson Controls has delivered performance where it really matters. Backed by advanced technology, lifecycle services and an industry-leading field organization, we elevate customer performance, turn goals into real-world results and help move society forward.
We are committed to diversity and inclusion and believe that different perspectives make us stronger. By encouraging open dialogue and valuing individuality, we strive to be one of the most desirable places to work.
#LI-BB1
#LI-Hybrid
Location & Eligibility
Listing Details
- Posted
- October 5, 2026
- First seen
- October 5, 2026
- Last seen
- October 5, 2026
Posting Health
- Days active
- 0
- Repost count
- 0
- Trust Level
- 51%
- Scored at
- October 5, 2026
Signal breakdown
Similar Information Security jobs
View all →Browse Similar Jobs
Stay ahead of the market
Get the latest job openings, salary trends, and hiring insights delivered to your inbox every week.
No spam. Unsubscribe at any time.