Manager - Zero Trust
- Location Bangalore-Karnataka-India
- Experience 10+ yrs
- Job type Full-time
- Posted 7 Oct 2026
You will be taken to Johnson Controls’s own careers page to apply. Job ID WD30281464.
Job description
Job Code: Job Code Name: Business Title: Manager – Zero Trust Region: APAC – Bengaluru/Pune Country: India Grade: 175
What you will do
As Manager – Zero Trust, you will own the Zero Trust strategy and roadmap, aligned to NIST SP 800-207 and the CISA Zero Trust Maturity Model. You will drive measurable removal of implicit trust across identity, devices, networks, applications and data, and approve the designs that go to production. You will lead and grow a multi-disciplinary team through structured Zero Trust training, clear performance management and real delegation. You will deliver concurrent programs with sprint discipline, operational SLAs and audit readiness. You will also act as the organization's Zero Trust advocate with IT partners.
What we look for Required · 10+ years in cybersecurity, across network security, identity, cloud or security architecture, with meaningful hands-on depth rather than oversight only. · 6+ years of direct people management. We mean line management with hiring, development, performance, retention and succession accountability, not technical leadership of a project team. · Practical Zero Trust experience in role. You have designed, implemented or led Zero Trust initiatives in an enterprise, and can describe what you changed, how you measured it and what went wrong. · Strong grounding in Zero Trust principles and frameworks, including NIST SP 800-207, the CISA Zero Trust Maturity Model or equivalent, and the judgment to apply them to a real, imperfect estate. · Working knowledge across several Zero Trust domains: o ZTNA and SSE/SASE o Microsegmentation o Identity and access management o Privileged access o Conditional access and MFA o Device trust o Application and developer-environment access o Data protection · Experience developing security strategies, architectures and roadmaps, and owning their delivery from design through build, operation and automation. · Enough technical depth to credibly review and challenge designs from senior network and identity engineers. · Experience leading the response to high-severity security incidents. This means coordinating IT, legal and business teams through containment, remediation and post-incident control improvement. · Experience building or scaling a team, not only inheriting one, including managing across regions and planning capacity. · Outstanding communication and presentation skills. You can explain complex technical concepts to non-technical audiences and defend a technical position to senior leadership.