Manager, Privacy Assessments & Risk

We are the movers of the world and the makers of the future. We get up every day, roll up our sleeves and build a better world -- together. At Ford, we’re all a part of something bigger than ourselves. Are you ready to change the way the world moves?

As a member of our Government and Community Relations team, you’ll have the opportunity to help shape policy and legislation that advances our core business objectives. You’ll also be able to partner with community leaders to advance education, community life and driving safety. If you’re looking for the opportunity to make a real impact in the world, join us.

As a global leader in advanced mobility solutions, our outstanding team of legal professionals helps us navigate the continually changing legal and regulatory landscape. In our Office of General Counsel, you’ll be part of an organization that collaborates with outside counsel to operate as a global team and deliver world-class legal, tax and audit services to client groups throughout the company.

In this position...

Build and lead a new team from the ground up. You will be the catalyst for establishing and shaping our company's essential privacy assessment functions. This is a unique opportunity to hire and mentor a team of seven specialists, creating the structure and vision for our Privacy Impact Assessment (PIA) and Third-Party Privacy Risk Management (TPRM) programs. Your leadership will directly influence the team's culture and success.

Shape the future of our privacy and risk strategy. You won't just be managing a team; you'll be at the forefront of developing and implementing the programs that are fundamental to our privacy risk mitigation strategy. You will have a significant impact on how we protect our customers' data and manage third-party relationships, ensuring that privacy is a cornerstone of our operations. Your work will have a visible, long-term influence on our business.

Become a leader with cross-functional influence. In this role, you will act as an advisor, collaborating with legal, IT, and business teams to embed privacy principles into our projects and systems. You'll have the opportunity to guide management on privacy risks and mitigation strategies, making you a central figure in our commitment to data privacy. This position offers a high degree of visibility and the chance to champion a culture of privacy across the entire organization.

What you'll do...

• You will hire, guide, and develop a new team of privacy professionals, fostering their skills in privacy and risk analysis and establishing a clear direction for their work.
• You will direct the end-to-end Privacy Impact Assessment (PIA) process, working with project teams to identify and address privacy risks in new products, services, and internal systems.
• You will help build and operate our Third-Party Privacy Risk Management (TPRM) program, evaluating the privacy posture of our vendors and partners to ensure they meet our data protection standards.
• You will serve as a central point of contact for analyzing privacy risk, advising stakeholders in legal, cybersecurity, and business units on mitigation strategies and privacy-by-design principles.
• You will establish the operational frameworks and reporting mechanisms for the PIA and TPRM programs, tracking key metrics and communicating the status of privacy risks to leadership.

You'll have...

• 10 years or equivalent combination of relevant education and experience.
• Direct responsibility for conducting Privacy Impact Assessments (PIAs), Data Protection Impact Assessments (DPIAs), or third-party risk assessments.
• Experience using privacy management software, particularly in the context of assessments and vendor management.

Even better, you may have...

• Experience directly managing or leading a team of privacy or risk analysts.
• Deep, hands-on experience with the OneTrust platform, especially with the PIA/DPIA and Third-Party Risk Management modules.
• OneTrust Fellow of Information Privacy (FIP) or other advanced OneTrust certifications.
• Professional certifications such as CIPP (Certified Information Privacy Professional), CIPM (Certified Information Privacy Manager), or CTPRP (Certified Third-Party Risk Professional).
• Proven experience in building and operationalizing new privacy or risk management programs from the ground up.
• Strong understanding of global privacy laws and frameworks, such as GDPR, CCPA/CPRA, and others.

You may not check every box, or your experience may look a little different from what we've outlined, but if you think you can bring value to Ford Motor Company, we encourage you to apply!

As an established global company, we offer the benefit of choice. You