Sr. Director, Cyber Services

About Ford

Come help build a better world, where every person is free to move and pursue their dreams. Ford Motor Company was built on the belief that freedom of movement drives human progress. It’s a belief that has fueled our passion to create great cars and trucks. And today, it drives our commitment to become the world’s most trusted mobility company, designing vehicles for a smart world that helps people move more safely, confidently, and freely. Ford is experiencing significant business transformation in an ever-changing propulsion and digital world, and we are looking for exceptional talent to join us on this journey.

 

About Enterprise Technology

Enterprise Technology plays a critical part in shaping the future of mobility. If you’re looking for the chance to leverage advanced technology to redefine the transportation landscape, enhance the customer experience and improve people’s lives, this is the opportunity for you. Join us and challenge your IT expertise and analytical skills to help create vehicles that are as smart as you are.

 

The Opportunity

The Sr. Director, Cybersecurity Services plays a critical leadership role in developing and executing the company's overall cybersecurity strategy. This individual will be responsible for the strategic direction, operational management, and continuous improvement of multiple cybersecurity service areas, ensuring the confidentiality, integrity, and availability of company data and systems. The successful candidate will possess strong technical skills, excellent communication abilities, and proven experience in leading and mentoring a team.

What you’ll be able to do?

Consulting & Advisory Services:

• Provide expert-level cybersecurity consulting and advisory services to various business units, aligning security solutions with business objectives and risk appetite.
• Conduct risk assessments, vulnerability analyses, and penetration testing to identify and mitigate potential security threats.
• Develop and maintain a comprehensive cybersecurity roadmap, aligning with industry best practices and regulatory requirements.
• Advise on the selection, implementation, and maintenance of security technologies and solutions.
• Stay abreast of emerging cybersecurity threats and vulnerabilities, providing proactive recommendations for mitigation.

Governance, Risk & Compliance Services:

• Develop and maintain a robust cybersecurity governance framework, ensuring compliance with relevant industry standards, regulations (e.g., GDPR, HIPAA, PCI DSS), and internal policies.
• Oversee the development and implementation of security policies, procedures, and standards.
• Manage the security incident response process, ensuring timely and effective response to security incidents.
• Conduct regular security audits and assessments to ensure ongoing compliance and identify areas for improvement.
• Develop and maintain key performance indicators (KPIs) to measure the effectiveness of cybersecurity programs.

Communication, Training & Awareness Services:

• Develop and deliver comprehensive cybersecurity awareness training programs for employees at all levels.
• Create and disseminate security communications, keeping employees informed about current threats and best practices.
• Develop and maintain a strong security culture within the organization.
• Manage internal and external communications regarding security incidents and breaches.

Security Assurance Services:

• Oversee the implementation and maintenance of security controls across all company systems and infrastructure.
• Lead security architecture design and review processes.
• Manage security testing and vulnerability management programs.
• Develop and maintain security baselines and standards.
• Conduct regular security assessments and audits to ensure the effectiveness of security controls.

Data Protection Services:

• Develop and implement data loss prevention (DLP) strategies and technologies.
• Oversee the implementation and maintenance of data encryption and access control mechanisms.
• Ensure compliance with data privacy regulations.
• Manage data breach response and recovery efforts