IT Security & Controls Senior Analyst

Ford Motor; Basildon; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A leading automotive company based in Dunton seeks an experienced cybersecurity professional to lead initiatives in security, controls, and compliance. This role demands strong analytical and communication skills to advise engineering teams and enhance internal standards. The successful candidate will be responsible for IT due diligence and remediation of audit findings while collaborating with various teams to strengthen cybersecurity measures. Flexibility to attend the office for typically 4 days a week is required.

Qualifications

• Experience in IT Security with a controls mindset.
• Familiarity with cybersecurity threats and incident response.
• Certifications such as CRISC, CISM, CISSP, CISA are desirable.

Responsibilities

• Collaborate to enhance internal policies and controls.
• Advise teams on compliance and control requirements.
• Conduct IT due diligence assessments of third parties.

Skills

Technical expertise

Analytical skills

Strong communication

Problem-solving skills

Risk assessment

Organizational skills

Education

Degree in IT or Cybersecurity (minimum 2:2)

Tools

SOC 2 Type II

ISO 27001

Cloud security (AWS, Azure, GCP)

Job description

This role requires a blend of technical expertise, analytical skills, and a strong understanding of security principles, risk management frameworks and compliance regulations.

This is a leadership role demanding strong communication, analytical, and problem-solving skills, that would provide guidance and mentoring for Security & Controls Junior analysts.

Qualifications

• Degree in IT, Cybersecurity, or related field (minimum 2:2 or international equivalent).
• Experience in IT Security, with a strong controls mindset and background in system development or management.
• Familiarity with SOC 2 Type II, ISO 27001, or similar standards.
• Solid understanding of cybersecurity threats, controls, and incident response.
• Strong organizational, communication, and documentation skills.
• Ability to assess risks and develop practical security solutions.

Desirable

• Certifications such as CRISC, CISM, CISSP, CISA.
• Knowledge of ICT regulations (e.g., DORA, SYSC8, BaFin).
• Experience in financial services or regulated environments.
• Cloud security expertise (AWS, Azure, GCP).
• Experience in security awareness and training.

The Company is committed to diversity and equality of opportunity for all and is opposed to any form of less favourable treatment or harassment on the grounds of race, religion or belief, sex, marriage and civil partnership, pregnancy and maternity, age, sexual orientation, gender reassignment or disability.

This position is based in Dunton, and it is expected the successful candidate will be able to attend the Dunton office for typically 4 days a week and remain flexible on the days they are required to attend the office according to business requirements.

As part of our pre-employment checks process, successful candidates will be required to undergo a criminal record check. This will be conducted in line with the Rehabilitation of Offenders Act 1974 and applied only to unspent convictions.

Responsibilities

Security, Controls & Compliance

• Collaborate at Group level to enhance internal policies, standards, and controls.
• Advise Software Engineering teams on meeting compliance and control requirements.
• Conduct IT due diligence assessments of third-party ICT service providers to ensure alignment with leading information security standards.
• Identify and report gaps in compliance with key regulations (e.g., SOX, GDPR, DORA).
• Lead the remediation of complex audit findings and internal control issues, coordinating corrective actions and defining best practices.
• Develop and deliver awareness materials and contribute to reporting for senior risk and resilience committees.

Cyber security

• Represent the company at FS-ISAC events and other industry forums.
• Collaborate with global Ford Credit and FMC Cyber Defence teams to align strategies with FCE’s needs.
• Monitor cybersecurity trends and innovations, identifying opportunities to strengthen our cyber defense posture.
• Attend external cybersecurity events and share key insights with internal stakeholders.