Johnson Electric

Cyber Security Analyst

In short

This role protects Johnson Electric's IT and Operational Technology (OT) environments across the Americas, acting as a Level 2 Security Operations Analyst alongside a third-party SOC to handle security alerts, vulnerability management, risk assessments, and compliance (TISAX, ISO 27001/27002, CMMC, IATF 16949). The company is a global manufacturing organization, and the role is onsite five days a week in Plymouth, MI with occasional international travel. It demands 5+ years of information security experience, hands-on expertise with tools like Qualys, Zscaler, Microsoft Defender, Proofpoint, Fortinet, and Palo Alto Networks, plus familiarity with OT/industrial control system security. A bachelor's degree and certifications such as CISSP, CISM, CISA, CEH, or GIAC are preferred.

Join Our Team as a Cyber Security Analyst at Johnson Electric!
Location: Plymouth, MI (Onsite)
Department: Information Technology
Vacancy Type: Existing Position
Travel: As required (local and limited international)
Sign-on Bonus: 5,000 USD (if joining in November 2026)
As our next Cyber Security Analyst, you will play a critical role in protecting Johnson Electric's IT and Operational Technology (OT) environments across the Americas region. You will work closely with global security teams, third-party security providers, and business leaders to strengthen our cybersecurity posture, ensure compliance with industry standards, and proactively manage cyber risks. If you're passionate about security operations, threat management, and driving cybersecurity excellence in a global manufacturing environment, we'd love to hear from you.
What You'll Be Doing:
•Provide executive-level security reporting, including cybersecurity metrics, compliance status, risks, and remediation progress.
•Serve as the regional owner of cybersecurity tools, controls, and compliance initiatives.
•Act as a Level 2 Security Operations Analyst, partnering with a third-party Security Operations Center (SOC) to investigate and resolve security alerts and incidents within established SLAs.
•Conduct security risk assessments and exposure reviews for critical IT and OT assets and networks.
•Lead vulnerability management initiatives, ensuring critical vulnerabilities are remediated within defined KPIs.
•Coordinate remediation activities resulting from internal and third-party penetration testing exercises.
•Perform proactive security audits and assessments to identify, prioritize, and mitigate cyber risks.
•Develop, maintain, and enhance security playbooks, incident response procedures, and threat-hunting methodologies.
•Continuously improve security operations through automation, process optimization, and best practices.
•Collaborate with Corporate Information Security and regional cybersecurity teams to align security strategies and standards.
•Conduct regular compliance, vulnerability, and penetration scans across IT and OT environments to ensure systems meet CIS Benchmark and security hardening requirements.
•Support internal and external audits by gathering security logs, evidence, and documentation.
•Lead compliance activities related to TISAX, ISO 27001/27002, CMMC, IATF 16949, CMAC, and other industry requirements.
•Influence and drive cross-functional stakeholders to achieve cybersecurity and compliance objectives.
What We're Looking For:
•Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field.
•Minimum of 5 years of experience in Information Security, Cybersecurity, or a related technical discipline.
•Experience supporting or securing Operational Technology (OT) environments and industrial control systems is preferred.
•Hands-on experience with security technologies such as Qualys, Zscaler, Xona, Microsoft Defender for Endpoint (MDE), Proofpoint, Fortinet, Palo Alto Networks, TxOne, or similar solutions.
•Strong understanding of cybersecurity frameworks and standards including ISO 27001/27002, TISAX ISA 5.1, and NIST SP 800-82.
•Professional certifications such as CISSP, CISM, CISA, CEH, GIAC, or equivalent are highly preferred.
•Experience with vulnerability management, threat detection, incident response, risk assessment, and compliance programs.
•Strong analytical and problem-solving skills with the ability to communicate technical concepts to non-technical audiences.
•Excellent written and verbal communication skills in English.
•Ability to work onsite in the Plymouth office five days per week.
•Flexibility to support global teams across multiple time zones when required.
•Willingness to travel internationally, including Canada, Mexico, and China, as business needs require.
How to Apply:
Apply online at www.johnsonelectric.com

Stop applying.
Get referred.

$10 in free credits

In just 60 seconds, fully on autopilot — Eraldt's AI agents read your CV, map the roles you fit, find live vacancies and the people who can refer you, write personal emails, and get you referred.

This isn't an application: your CV doesn't go to the company, and we don't promise a referral for this exact role.

Discover who else lands interviews on autopilot