Enterprise Cybersecurity Advisor

We are seeking a results-oriented Enterprise Cybersecurity Analyst to join Ford’s Cybersecurity team in Mexico. This position plays a critical role in maintaining a resilient security posture, ensuring regulatory compliance, and proactively identifying and mitigating emerging risks across an increasingly complex technology footprint.

Beyond core assessment and advisory responsibilities, you will lead key cybersecurity projects aimed at optimizing operational workflows and delivering a high-quality experience for internal stakeholders and business partners.

Responsibilities

• 4 Days On Site In GTBC Ford México (Naucalpan, México)
• Cybersecurity Advisory & Risk Guidance: Act as a subject matter expert (SME), delivering policy interpretation and risk-based consultation to enterprise stakeholders to ensure consistent alignment with corporate security standards, frameworks, and regulatory requirements.
• Third-Party Risk Management & OSP Compliance: Drive Outside Service Provider (OSP) compliance by partnering with business owners to evaluate vendor risk. Assess the security posture of third-party services, review architectures, and establish safeguards to mitigate supply chain vulnerabilities and operational disruptions.
• GRC & Architecture Assessments: Conduct comprehensive Governance, Risk, and Compliance (GRC) assessments on high-risk applications and cloud/on-premise infrastructure. Validate security control implementation, identify design deficiencies, and define actionable remediation strategies.
• Cybersecurity Project & Program Delivery: Lead and execute strategic cybersecurity projects from inception through deployment. Champion initiatives that enhance the internal customer experience by delivering user-centric security solutions, automating workflows, and streamlining governance processes.
• Vulnerability Triage & Remediation Support: Collaborate with cross-functional technical teams to analyze, prioritize, and track the remediation of security vulnerabilities across enterprise assets in accordance with established SLAs.
• Security Culture, Enablement & General Consultation: Champion enterprise-wide cybersecurity awareness and education initiatives, empowering global employees as our proactive first line of defense. Concurrently, serve as a central advisory contact for global staff by fielding daily cybersecurity inquiries, offering practical guidance, and collaborating across specialized cybersecurity teams to triage or redirect complex requests to the right domain experts.

Qualifications