Enterprise Cybersecurity Advisor

We are seeking a results-oriented Enterprise Cybersecurity Analyst to join Ford’s Cybersecurity team in Mexico. This position plays a critical role in maintaining a resilient security posture, ensuring regulatory compliance, and proactively identifying and mitigating emerging risks across an increasingly complex technology footprint.

Beyond core assessment and advisory responsibilities, you will lead key cybersecurity projects aimed at optimizing operational workflows and delivering a high-quality experience for internal stakeholders and business partners.

- Education: Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Software Engineering, or a related STEM field (or equivalent practical experience/formal training).
- Professional Experience:
Minimum of 2+ years of dedicated professional experience in one or more core cybersecurity domains, including: Third-Party / Vendor Risk Management (TPRM)
- Vulnerability Management & Assessment
- Cybersecurity Advisory, Governance, or IT Auditing
- Application Security (AppSec) & Secure Coding (SSDLC)
- Cloud Security & DevSecOps Methodologies
- Identity & Access Management (IAM)
- Security Operations (SecOps) & Incident Response

- Alternatively: 2–3+ years of general IT experience (e.g., software engineering, systems administration, cloud infrastructure) coupled with demonstrated aptitude, certifications, or practical transition toward enterprise cybersecurity.

Technical Skills & Knowledge:

- Frameworks & Standards: Working knowledge of industry-recognized security standards and governance frameworks (e.g., NIST CSF, ISO/IEC 27001/27002, CIS Controls, OWASP).
- Risk & Threat Analysis: Hands-on experience or familiarity with IT Risk Assessment methodologies, Threat Modeling (e.g., STRIDE), and risk quantification principles.
- Identity & Access Management (IAM): Solid understanding of modern authentication and authorization protocols, federated identity standards, and grant flows (e.g., OAuth 2.0, OpenID Connect, SAML 2.0, MFA).
- Application & API Security: Familiarity with common web application vulnerabilities (e.g., OWASP Top 10, CWE/SANS Top 25), API security best practices (e.g., OWASP API Top 10), and practical remediation strategies.
- Applied Cryptography: Working understanding of core cryptographic principles, including encryption standards (symmetric/asymmetric), hashing algorithms, digital signatures, and public key infrastructure (PKI / TLS/SSL).
- Engineering & Culture: Understanding of DevSecOps pipelines (CI/CD security integration), secure coding principles, and working within Agile/Scrum delivery environments.

The Impact You’ll Make:

- This role offers a unique opportunity to directly shape and safeguard Ford’s digital ecosystem on a global scale. Based in Mexico as an integral part of Ford’s distributed global security organization, you will deliver worldwide advisory, govern international third-party ecosystems, and drive enterprise-level resilience:
- Global Operational Reach: Serve as a central advisory contact and trusted security partner for Ford business units and cross-functional teams worldwide, ensuring seamless consultation and rapid response across international time zones.
- Accelerated Global Project Delivery: Champion and execute key cybersecurity projects that modernize enterprise-wide defense capabilities, optimize roadmaps, and deploy scalable security solutions across global business operations.
- Elevated Stakeholder Experience: Design and implement user-centric security processes that reduce friction for business partners around the world, cultivating a security culture where innovation, velocity, and compliance go hand in hand.
- Enterprise-Wide Risk Reduction: Safeguard Ford from emerging global threats and vulnerabilities by enforcing rigorous compliance with corporate policies and international standards, protecting brand reputation and digital assets everywhere Ford operates.
- Resilient Defense Posture: Strengthen organization-wide security resilience through proactive threat mitigation, GRC governance, and hands-on risk evaluations for both internal systems and global third-party providers (OSP).
- Continuous Professional Growth: Immerse yourself in the forefront of global automotive innovation and connected vehicle technology, collaborating with diverse, multi-cultural teams and accessing extensive opportunities for mentorship and career advancement.

Join our global team in safeguarding Ford's future and engineering a secure, connected digital landscape for our employees, partners, and customers worldwide.

Ford of Mexico is committed to being an equal opportunity employer. We believe that a diverse and inclusive workplace is essential to our success. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, pregnancy, veteran status, or disability status.

Our focus is to build the best team. If you think you can bring value to Ford, love to collaborate, prioritize and aim to deliver excellence in everything you do, we encourage you to apply!

We thank all candidates for their interest, but only those selected for an interview will be contacted.

#LI-NG2

#FordMexico