Enterprise Cybersecurity Advisor

We are seeking a results-oriented Enterprise Cybersecurity Analyst to join Ford’s Cybersecurity team in Mexico. This position plays a critical role in maintaining a resilient security posture, ensuring regulatory compliance, and proactively identifying and mitigating emerging risks across an increasingly complex technology footprint.

Beyond core assessment and advisory responsibilities, you will lead key cybersecurity projects aimed at optimizing operational workflows and delivering a high-quality experience for internal stakeholders and business partners.

• Education: Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Software Engineering, or a related STEM field (or equivalent practical experience/formal training).

• Professional Experience: 

  • Minimum of 2+ years of dedicated professional experience in one or more core cybersecurity domains, including: 
    • Third-Party / Vendor Risk Management (TPRM)
    • Vulnerability Management & Assessment
    • Cybersecurity Advisory, Governance, or IT Auditing
    • Application Security (AppSec) & Secure Coding (SSDLC)
    • Cloud Security & DevSecOps Methodologies
    • Identity & Access Management (IAM)
    • Security Operations (SecOps) & Incident Response
  • Alternatively: 2–3+ years of general IT experience (e.g., software engineering, systems administration, cloud infrastructure) coupled with demonstrated aptitude, certifications, or practical transition toward enterprise cybersecurity.

  Technical Skills & Knowledge:

  • Frameworks & Standards: Working knowledge of industry-recognized security standards and governance frameworks (e.g., NIST CSF, ISO/IEC 27001/27002, CIS Controls, OWASP).
  • Risk & Threat Analysis: Hands-on experience or familiarity with IT Risk Assessment methodologies, Threat Modeling (e.g., STRIDE), and risk quantification principles.
  • Identity & Access Management (IAM): Solid understanding of modern authentication and authorization protocols, federated identity standards, and grant flows (e.g., OAuth 2.0, OpenID Connect, SAML 2.0, MFA).
  • Application & API Security: Familiarity with common web application vulnerabilities (e.g., OWASP Top 10, CWE/SANS Top 25), API security best practices (e.g., OWASP API Top 10), and practical remediation strategies.
  • Applied Cryptography: Working understanding of core cryptographic principles, including encryption standards (symmetric/asymmetric), hashing algorithms, digital signatures, and public key infrastructure (PKI / TLS/SSL).
  • Engineering & Culture: Understanding of DevSecOps pipelines (CI/CD security integration), secure coding principles, and working within Agile/Scrum delivery environments.

  The Impact You’ll Make:

  • This role offers a unique opportunity to directly shape and safeguard Ford’s digital ecosystem on a global scale. Based in Mexico as an integral part of Ford’s distributed global security organization, you will deliver worldwide advisory, govern international third-party ecosystems, and drive enterprise-level resilience:

  • Global Operational Reach: Serve as a central advisory contact and trusted security partner for Ford business units and cross-functional teams worldwide, ensuring seamless consultation and rapid response across international time zones.
  • Accelerated Global Project Delivery: Champion and execute key cybersecurity projects that modernize enterprise-wide defense capabilities, optimize roadmaps, and deploy scalable security solutions across global business operations.
  • Elevated Stakeholder Experience: Design and implement user-centric security processes that reduce friction for business partners around the world, cultivating a security culture where innovation, velocity, and compliance go hand in hand.
  • Enterprise-Wide Risk Reduction: Safeguard Ford from emerging global threats and vulnerabilities by enforcing rigorous compliance with corporate policies and international standards, protecting brand reputation and digital assets everywhere Ford operates.
  • Resilient Defense Posture: Strengthen organization-wide security resilience through proactive threat mitigation, GRC governance, and hands-on risk evaluations for both internal systems and global third-party providers (OSP).

  • Continuous Professional Growth: Immerse yourself in the forefront of global automotive innovation and connected vehicle technology, collaborating with diverse, multi-cultural teams and accessing extensive opportunities for mentorship and career advancement.

    Join our global team in safeguarding Ford's future and engineering a secure, connected digital landscape for our employees, partners, and customers worldwide.

Ford of Mexico is committed to being an equal opportunity employer. We believe that a diverse and inclusive workplace is essential to our success. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, pregnancy, veteran status, or disability status.

Our focus is to build the best team. If you think you can bring value to Ford, love to collaborate, prioritize and aim to deliver excellence in everything you do, we encourage you to apply!

We thank all candidates for their interest, but only those selected for an interview will be contacted.

#LI-NG2

#FordMexico

• 4 Days On Site In GTBC Ford México (Naucalpan, México)
• Cybersecurity Advisory & Risk Guidance: Act as a subject matter expert (SME), delivering policy interpretation and risk-based consultation to enterprise stakeholders to ensure consistent alignment with corporate security standards, frameworks, and regulatory requirements.
• Third-Party Risk Management & OSP Compliance: Drive Outside Service Provider (OSP) compliance by partnering with business owners to evaluate vendor risk. Assess the security posture of third-party services, review architectures, and establish safeguards to mitigate supply chain vulnerabilities and operational disruptions.
• GRC & Architecture Assessments: Conduct comprehensive Governance, Risk, and Compliance (GRC) assessments on high-risk applications and cloud/on-premise infrastructure. Validate security control implementation, identify design deficiencies, and define actionable remediation strategies.
• Cybersecurity Project & Program Delivery: Lead and execute strategic cybersecurity projects from inception through deployment. Champion initiatives that enhance the internal customer experience by delivering user-centric security solutions, automating workflows, and streamlining governance processes.
• Vulnerability Triage & Remediation Support: Collaborate with cross-functional technical teams to analyze, prioritize, and track the remediation of security vulnerabilities across enterprise assets in accordance with established SLAs.
• Security Culture, Enablement & General Consultation: Champion enterprise-wide cybersecurity awareness and education initiatives, empowering global employees as our proactive first line of defense. Concurrently, serve as a central advisory contact for global staff by fielding daily cybersecurity inquiries, offering practical guidance, and collaborating across specialized cybersecurity teams to triage or redirect complex requests to the right domain experts.