Cyber Security Analyst

Johnson Electric•Plymouth, MI

16h•Onsite

About The Position

As our next Cyber Security Analyst, you will play a critical role in protecting Johnson Electric's IT and Operational Technology (OT) environments across the Americas region. You will work closely with global security teams, third-party security providers, and business leaders to strengthen our cybersecurity posture, ensure compliance with industry standards, and proactively manage cyber risks. If you're passionate about security operations, threat management, and driving cybersecurity excellence in a global manufacturing environment, we'd love to hear from you.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field.
Minimum of 5 years of experience in Information Security, Cybersecurity, or a related technical discipline.
Hands-on experience with security technologies such as Qualys, Zscaler, Xona, Microsoft Defender for Endpoint (MDE), Proofpoint, Fortinet, Palo Alto Networks, TxOne, or similar solutions.
Strong understanding of cybersecurity frameworks and standards including ISO 27001/27002, TISAX ISA 5.1, and NIST SP 800-82.
Experience with vulnerability management, threat detection, incident response, risk assessment, and compliance programs.
Strong analytical and problem-solving skills with the ability to communicate technical concepts to non-technical audiences.
Excellent written and verbal communication skills in English.
Ability to work onsite in the Plymouth office five days per week.
Flexibility to support global teams across multiple time zones when required.
Willingness to travel internationally, including Canada, Mexico, and China, as business needs require.

Nice To Haves

Experience supporting or securing Operational Technology (OT) environments and industrial control systems is preferred.
Professional certifications such as CISSP, CISM, CISA, CEH, GIAC, or equivalent are highly preferred.

Responsibilities

Provide executive-level security reporting, including cybersecurity metrics, compliance status, risks, and remediation progress.
Serve as the regional owner of cybersecurity tools, controls, and compliance initiatives.
Act as a Level 2 Security Operations Analyst, partnering with a third-party Security Operations Center (SOC) to investigate and resolve security alerts and incidents within established SLAs.
Conduct security risk assessments and exposure reviews for critical IT and OT assets and networks.
Lead vulnerability management initiatives, ensuring critical vulnerabilities are remediated within defined KPIs.
Coordinate remediation activities resulting from internal and third-party penetration testing exercises.
Perform proactive security audits and assessments to identify, prioritize, and mitigate cyber risks.
Develop, maintain, and enhance security playbooks, incident response procedures, and threat-hunting methodologies.
Continuously improve security operations through automation, process optimization, and best practices.
Collaborate with Corporate Information Security and regional cybersecurity teams to align security strategies and standards.
Conduct regular compliance, vulnerability, and penetration scans across IT and OT environments to ensure systems meet CIS Benchmark and security hardening requirements.
Support internal and external audits by gathering security logs, evidence, and documentation.
Lead compliance activities related to TISAX, ISO 27001/27002, CMMC, IATF 16949, CMAC, and other industry requirements.
Influence and drive cross-functional stakeholders to achieve cybersecurity and compliance objectives.