Enterprise Cybersecurity Advisor

Ford México; Naucalpan de Juárez; On-site; MXN 550,000 - 850,000; Full time

Job summary

Ford México is seeking an Enterprise Cybersecurity Analyst to join its Mexico-based cybersecurity team. You will lead risk guidance, conduct GRC assessments, and drive vulnerability remediation across our global IT footprint.

You will collaborate with cross-functional teams, manage third-party risk, and push security best practices, policies, and incident response readiness, aligning with Ford's security standards.

Qualifications

• 2+ years of dedicated professional experience in core cybersecurity domains.
• Bachelor’s degree in Computer Science or related STEM field.
• Familiarity with risk frameworks (NIST CSF, ISO/IEC 27001/27002, CIS Controls, OWASP) is desirable.

Responsibilities

• Deliver risk guidance to enterprise stakeholders to ensure alignment with security standards.
• Lead Governance, Risk, and Compliance assessments on high-risk apps and cloud/on-prem infrastructure.
• Drive vulnerability triage and remediation across enterprise assets with SLAs.
• Manage cybersecurity projects from inception to deployment.
• Promote cybersecurity awareness and enablement across global staff and partners.

Skills

Third-Party Risk Management

Vulnerability Management

Cybersecurity Advisory

AppSec & SSDLC

Cloud Security

IAM

SecOps & Incident Response

Education

Bachelor’s degree in Computer Science or related STEM

Job description

We are seeking a results-oriented Enterprise Cybersecurity Analyst to join Ford’s Cybersecurity team in Mexico. This position plays a critical role in maintaining a resilient security posture, ensuring regulatory compliance, and proactively identifying and mitigating emerging risks across an increasingly complex technology footprint.

Beyond core assessment and advisory responsibilities, you will lead key cybersecurity projects aimed at optimizing operational workflows and delivering a high-quality experience for internal stakeholders and business partners.

• 4 Days On Site In GTBC Ford México (Naucalpan, México)
• Cybersecurity Advisory & Risk Guidance: Act as a subject matter expert (SME), delivering policy interpretation and risk-based consultation to enterprise stakeholders to ensure consistent alignment with corporate security standards, frameworks, and regulatory requirements.
• Third-Party Risk Management & OSP Compliance: Drive Outside Service Provider (OSP) compliance by partnering with business owners to evaluate vendor risk. Assess the security posture of third-party services, review architectures, and establish safeguards to mitigate supply chain vulnerabilities and operational disruptions.
• GRC & Architecture Assessments: Conduct comprehensive Governance, Risk, and Compliance (GRC) assessments on high-risk applications and cloud/on-premise infrastructure. Validate security control implementation, identify design deficiencies, and define actionable remediation strategies.
• Cybersecurity Project & Program Delivery: Lead and execute strategic cybersecurity projects from inception through deployment. Champion initiatives that enhance the internal customer experience by delivering user-centric security solutions, automating workflows, and streamlining governance processes.
• Vulnerability Triage & Remediation Support: Collaborate with cross-functional technical teams to analyze, prioritize, and track the remediation of security vulnerabilities across enterprise assets in accordance with established SLAs.
• Security Culture, Enablement & General Consultation: Champion enterprise-wide cybersecurity awareness and education initiatives, empowering global employees as our proactive first line of defense. Concurrently, serve as a central advisory contact for global staff by fielding daily cybersecurity inquiries, offering practical guidance, and collaborating across specialized cybersecurity teams to triage or redirect complex requests to the right domain experts.

• Education: Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Software Engineering, or a related STEM field (or equivalent practical experience/formal training).
• Professional Experience:
  • Minimum of 2+ years of dedicated professional experience in one or more core cybersecurity domains, including:
    • Third-Party / Vendor Risk Management (TPRM)
    • Vulnerability Management & Assessment
    • Cybersecurity Advisory, Governance, or IT Auditing
    • Application Security (AppSec) & Secure Coding (SSDLC)
    • Cloud Security & DevSecOps Methodologies
    • Identity & Access Management (IAM)
    • Security Operations (SecOps) & Incident Response
  • Alternatively: 2–3+ years of general IT experience (e.g., software engineering, systems administration, cloud infrastructure) coupled with demonstrated aptitude, certifications, or practical transition toward enterprise cybersecurity.

Technical Skills & Knowledge

• Frameworks & Standards: Working knowledge of industry-recognized security standards and governance frameworks (e.g., NIST CSF, ISO/IEC 27001/27002, CIS Controls, OWASP).
• Risk & Threat Analysis: Hands-on experience or familiarity with IT Risk Assessment methodologies, Threat Modeling (e.g., STRIDE), and risk quantification principles.
• Identity & Access Management (IAM): Solid understanding of modern authentication and authorization protocols, federated identity standards, and grant flows (e.g., OAuth 2.0, OpenID Connect, SAML 2.0, MFA).
• Application & API Security: Familiarity with common web application vulnerabilities (e.g., OWASP Top 10, CWE/SANS Top 25), API security best practices (e.g., OWASP API Top 10), and practical remediation strategies.
• Applied Cryptography: Working understanding of core cryptographic principles, including encryption standards (symmetric/asymmetric), hashing algorithms, digital signatures, and public key infrastructure (PKI / TLS/SSL).
• Engineering & Culture: Understanding of DevSecOps pipelines (CI/CD security integration), secure coding principles, and working within Agile/Scrum delivery environments.

The Impact You’ll Make

• This role offers a unique opportunity to directly shape and safeguard Ford’s digital ecosystem on a global scale. Based in Mexico as an integral part of Ford’s distributed global security organization, you will deliver worldwide advisory, govern international third-party ecosystems, and drive enterprise-level resilience:
• Global Operational Reach: Serve as a central advisory contact and trusted security partner for Ford business units and cross-functional teams worldwide, ensuring seamless consultation and rapid response across international time zones.
• Accelerated Global Project Delivery: Champion and execute key cybersecurity projects that modernize enterprise-wide defense capabilities, optimize roadmaps, and deploy scalable security solutions across global business operations.
• Elevated Stakeholder Experience: Design and implement user-centric security processes that reduce friction for business partners around the world, cultivating a security culture where innovation, velocity, and compliance go hand in hand.
• Enterprise-Wide Risk Reduction: Safeguard Ford from emerging global threats and vulnerabilities by enforcing rigorous compliance with corporate policies and international standards, protecting brand reputation and digital assets everywhere Ford operates.
• Resilient Defense Posture: Strengthen organization-wide security resilience through proactive threat mitigation, GRC governance, and hands‑on risk evaluations for both internal systems and global third-party providers (OSP).
• Continuous Professional Growth: Immerse yourself in the forefront of global automotive innovation and connected vehicle technology, collaborating with diverse, multi‑cultural teams and accessing extensive opportunities for mentorship and career advancement.

Join our global team in safeguarding Ford's future and engineering a secure, connected digital landscape for our employees, partners, and customers worldwide.

Ford of Mexico is committed to being an equal opportunity employer. We believe that a diverse and inclusive workplace is essential to our success. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, pregnancy, veteran status, or disability status.

We thank all candidates for their interest, but only those selected for an interview will be contacted.

#FordMexico