IT Security & Controls Senior Analyst

Ford Motor; Essex; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

A leading global automotive company is seeking a skilled professional for a Security & Controls role in Dunton. The successful candidate will lead compliance initiatives and mentor junior analysts. Key qualifications include a degree in IT or Cybersecurity, significant experience in IT security, and knowledge of cybersecurity standards. This position demands teamwork and collaborative skills as the individual will work with various internal stakeholders to enhance security policies and protocols.

Qualifications

• Strong experience in IT Security, familiarity with key security standards.
• Certifications such as CRISC, CISM, CISSP, CISA are preferred.
• Solid understanding of cybersecurity threats and incident response.

Responsibilities

• Enhance internal policies, standards, and controls.
• Advise on compliance and control requirements for software development.
• Conduct IT due diligence assessments of service providers.
• Lead remediation of complex audit findings.

Skills

IT Security

Analytical skills

Communication skills

Problem-solving

Risk assessment

Organizational skills

Documentation skills

Security awareness training

Education

Degree in IT, Cybersecurity, or related field (minimum 2:2)

Tools

AWS

Azure

GCP

SOC 2 Type II

ISO 27001

Job description

This role requires a blend of technical expertise, analytical skills, and a strong understanding of security principles, risk management frameworks and compliance regulations.

This is a leadership role demanding strong communication, analytical, and problem-solving skills, that would provide guidance and mentoring for Security & Controls Junior analysts.

Responsibilities

Security, Controls & Compliance:

• Collaborate at Group level to enhance internal policies, standards, and controls.
• Advise Software Engineering teams on meeting compliance and control requirements.
• Conduct IT due diligence assessments of third‑party ICT service providers to ensure alignment with leading information security standards.
• Identify and report gaps in compliance with key regulations (e.g., SOX, GDPR, DORA).
• Lead the remediation of complex audit findings and internal control issues, coordinating corrective actions and defining best practices.
• Develop and deliver awareness materials and contribute to reporting for senior risk and resilience committees.

Cyber security:

• Represent the company at FS‑ISAC events and other industry forums.
• Collaborate with global Ford Credit and FMC Cyber Defence teams to align strategies with FCE’s needs.
• Monitor cybersecurity trends and innovations, identifying opportunities to strengthen our cyber defence posture.
• Attend external cybersecurity events and share key insights with internal stakeholders.

Qualifications

• Degree in IT, Cybersecurity, or related field (minimum 2:2 or international equivalent).
• Experience in IT Security, with a strong controls mindset and background in system development or management.
• Familiarity with SOC 2 Type II, ISO 27001, or similar standards.
• Solid understanding of cybersecurity threats, controls, and incident response.
• Strong organisational, communication, and documentation skills.
• Ability to assess risks and develop practical security solutions.
• Certifications such as CRISC, CISM, CISSP, CISA.
• Knowledge of ICT regulations (e.g., DORA, SYSC8, BaFin).
• Experience in financial services or regulated environments.
• Cloud security expertise (AWS, Azure, GCP).
• Experience in security awareness and training.

The Company is committed to diversity and equality of opportunity for all and is opposed to any form of less favourable treatment or harassment on the grounds of race, religion or belief, sex, marriage and civil partnership, pregnancy and maternity, age, sexual orientation, gender reassignment or disability.

This position is based in Dunton, and it is expected the successful candidate will be able to attend the Dunton office for typically 4 days a week and remain flexible on the days they are required to attend the office according to business requirements.

As part of our pre‑employment checks process, successful candidates will be required to undergo a criminal record check. This will be conducted in line with the Rehabilitation of Offenders Act 1974 and applied only to unspent convictions.