Mexico-based Enterprise Cybersecurity Advisor

Lincoln Motor Company; Naucalpan de Juárez; On-site; MXN 700,000 - 1,100,000; Full time

Job summary

Ford Motor Company (Mexico) is seeking a results-oriented Enterprise Cybersecurity Analyst to join its Cybersecurity team in Mexico. The role focuses on advisory work, risk guidance, and leading projects to strengthen Ford’s security posture across the organization.

You will manage third-party risk, conduct GRC assessments, and drive secure coding, cloud security, and DevSecOps practices while enabling internal stakeholders and global staff.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Software Engineering, or a related STEM field.
• Minimum of 2+ years of dedicated professional experience in cybersecurity domains such as TPRM, vulnerability management, governance, or IT auditing.

Responsibilities

• Act as a cybersecurity SME delivering policy interpretation and risk-based guidance to enterprise stakeholders.
• Drive third-party risk management and assess security posture of vendors to mitigate supply chain risks.
• Conduct GRC and architecture assessments, validate security controls, and define remediation strategies.
• Lead cybersecurity projects from inception to deployment, improving internal customer experience and automating workflows.
• Collaborate with cross-functional teams for vulnerability triage and remediation per SLAs.
• Champion enterprise-wide cybersecurity awareness and act as a central advisory contact for global staff.

Skills

TPRM

Vulnerability Mgmt

Governance/IT Audit

AppSec & SSDLC

Cloud Security

IAM

SecOps/IR

DevSecOps

Education

Bachelor's degree in Computer Science or related STEM

Tools

NIST CSF

ISO/IEC 27001

CIS Controls

OWASP

Job description

Ford Motor Company (Mexico) is seeking a results-oriented Enterprise Cybersecurity Analyst to join its Cybersecurity team in Mexico. The role focuses on advisory work, risk guidance, and leading projects to strengthen Ford’s security posture across the organization.

You will manage third-party risk, conduct GRC assessments, and drive secure coding, cloud security, and DevSecOps practices while enabling internal stakeholders and global staff.