Analyst Information Security – GRC Platform

About the role

This role supports and improves Johnson Controls’ information security and compliance program. You will manage Governance, Risk & Compliance (GRC) tools, automate compliance processes and work closely with IT, Security and Audit teams.

Key responsibilities

• Manage and maintain GRC/compliance tools for control monitoring, evidence collection, risk assessments and issue tracking.
• Automate compliance workflows, integrate tools with IAM and ticketing systems, and create dashboards and reports.
• Support security controls aligned with ISO 27001, SOC 2, PCI DSS and IT General Controls, and assist audit evidence collection.
• Collaborate with IT Compliance, Risk, Security and Engineering teams to define controls and improve processes.
• Handle daily administration of compliance tools, troubleshoot issues and maintain documentation and SOPs.
• Define and enforce standards for compliance evidence to ensure audit‑ready data quality.

Required profile

• Experience in IT Compliance, IT Audit or Information Security.
• Understanding of IT controls, risk management and compliance frameworks.
• Experience with automation, scripting or integrations.

Required skills

• Familiarity with GRC tools such as ServiceNow GRC, OneTrust, Jira, SIEM/SOAR or IAM platforms.
• Power BI and Excel reporting and analytics.
• Scripting/automation using Python, PowerShell or APIs.

What we offer

• Base salary €2,430 – €3,807 per month plus a 13th month salary.
• Meal vouchers, flexible benefits budget, private kindergarten allowance.
• Hybrid working model, flexible hours and home‑office days.
• Well‑being programs including massages, yoga, psychologist support and health events.
• Relocation support with housing allowance for moves to Slovakia.