IT Security Manager

We are the movers of the world and the makers of the future. We get up every day, roll up our sleeves and build a better world together. At Ford, we’re all a part of something bigger than ourselves. Are you ready to change the way the world moves?

The Ford Motor Credit Company team helps put people behind the wheels of great Ford and Lincoln vehicles. By partnering with dealerships, we provide financing, personalized service and professional expertise to thousands of dealers and millions of customers in over one hundred countries around the world.

In this position...

Ford Credit is hiring a Cybersecurity Manager to lead second line-of-defense activities, ensuring a strong cybersecurity posture. The role involves driving global security initiatives to support modernization efforts, advising on security controls, monitoring compliance, collaborating on remediation, and improving IT risk management. We are looking for a candidate to help us improve our cybersecurity posture and reduce risk.

The Cybersecurity Manager is a critical role responsible for leading and coordinating second line-of-defense activities to ensure the organization's cybersecurity posture is robust and effective. This role involves driving global strategic security initiatives to support the Company modernization efforts (which will adjust depending on business needs); advising on security controls, monitoring compliance, collaborating on remediation efforts, and contributing to the improvement of the IT risk management process. The Cybersecurity Manager will work closely with business units, IT teams, and other stakeholders to mitigate risks and maintain a strong security environment.

What you'll do...

Second Line of Defense:

• Act as a key contributor to the second line of defense, providing independent oversight and challenge to the first line's cybersecurity activities.
• Evaluate the design and operational effectiveness of security controls. across the Ford Credit organization.
• Complete an assessment of second line of defense controls and assist in creating the strategy to implement efficient regular testing and monitoring of controls.

Security Initiative: Security Gates

• Lead security initiatives aimed at integrating security into the application development lifecycle.
• Design and implement processes to establish security gates and checkpoints in the development process.
• Promote secure coding practices and security awareness among development teams.

 Security Initiative: Global Operating Model Implementation:

• Contribute to the development and implementation of a global operating model for the Ford Credit cyber team.
• Help define roles, responsibilities, and processes to ensure consistent and effective security operations across different regions.
• Support the standardization of security processes.

IT Risk Process Improvement:

• Evaluate and improve the organization's IT risk management processes, methodologies, and tools.
• Collaborate with risk management teams to ensure IT risks are accurately identified, assessed, and mitigated.
• Contribute to the development of risk metrics and reporting to provide visibility into the organization's IT risk posture.
• Assist with the improvement plans for the GRC (Governance, Risk, Compliance) platform.

Cyber Issue Remediation:

• Support the collaboration with business units, IT teams, and incident response teams to address and remediate identified cyber issues.
• Track remediation efforts and ensure timely resolution of security gaps.
• Provide guidance and support during security incidents and investigations.

You'll have...

• Education: Bachelor's degree in computer science, Information Security, or a related field.

Skills:

• Knowledge of security technologies, including firewalls, intrusion detection/prevention systems, SIEM, and vulnerability scanners.
• Knowledge of IT risk assessment methodologies and risk mitigation strategies.
• Strong understanding of application security principles and secure development practices.
• Excellent analytical and problem-solving skills.
• Strong communication and interpersonal skills, with the ability to effectively collaborate with diverse teams.
• Ability to explain technical concepts to non-technical audiences.
• Knowledge or experience working in a Financial Institution is a plus.
• Knowledge of regulatory requirements (e.g., GDPR).

Even better, you may have...

• Relevant certifications such as