Director - Cloud Security at Ford Global Career Site

Dearborn, Michigan, United States -

Full Time

Start Date

Immediate

Expiry Date

30 Jan, 26

Salary

0.0

Posted On

01 Nov, 25

Experience

10 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Cloud Security, SaaS Security, Risk Management, Incident Response, Compliance, Governance, Team Development, Leadership, Communication, Interpersonal Skills, Identity and Access Management, Data Protection, Infrastructure Security, DevSecOps, Zero Trust, Threat Intelligence

Industry

Motor Vehicle Manufacturing

Description

Strategic Leadership & Program Management: Define, develop, and implement a holistic enterprise public cloud infrastructure and SaaS security strategy, roadmap, and security architecture that integrates seamlessly across all platforms and applications. This includes partnering with various teams to align on the long-term technology roadmap for security products and features. Team Development & Oversight: Supervise, mentor, and develop a team of security managers and their respective teams (Public Cloud Security Infrastructure Manager, SaaS Security Manager, and their direct reports), fostering professional growth and maintaining high performance across both cloud and SaaS security functions. Unified Security Posture: Drive the implementation and management of robust security controls and policies, ensuring a consistent and effective security posture across Azure, GCP, and all SaaS applications. This includes evaluating, integrating, and managing next-generation security tools and technologies specific to cloud ecosystems. Compliance & Governance: Oversee compliance with all relevant regulatory and internal requirements, including NIST 800-53, ISO 27001, SOC 2, GDPR, and CCPA, across both cloud infrastructure and SaaS applications. Develop and implement security controls for IaaS, PaaS, and SaaS environments. Risk Management: Establish and manage comprehensive risk assessment and management programs for cloud infrastructure and SaaS applications, prioritizing remediation efforts based on risk, business impact, and threat intelligence. This includes overseeing third-party SaaS vendor risk management, due diligence, and continuous monitoring of vendor security posture. Incident Response Oversight: Partner with Cyber Defense leadership to align on incident response goals, requirements and data to ensure effective containment, analysis, and resolution. Assist with additional Response activities when requested by Cyber Defense leadership. Cross-functional Collaboration: Collaborate extensively with engineering, operations, procurement, legal, GRC, business units, and audit teams to embed security throughout the entire lifecycle of cloud services and SaaS applications, from selection and design to deployment and offboarding. Reporting & Communication: Develop and present comprehensive reports on the enterprise cloud and SaaS security posture, compliance status, vendor risk, and key security initiatives to executive leadership and relevant governance forums. Innovation & Threat Intelligence: Stay abreast of the latest security threats, vulnerabilities, emerging technologies, and best practices relevant to multi-cloud environments (Azure, GCP) and the evolving SaaS landscape. Evaluate and recommend new cloud security technologies and practices. Bachelor's degree in Computer Science, Information Technology, Software Engineering, or a related field (or a combination of education and experience). 10+ years of experience in information security, with at least 5 years in a leadership capacity managing other security professionals or leading large security programs. Demonstrable hands-on experience securing production infrastructure in public clouds (Azure, GCP preferred) and managing security for a diverse portfolio of production SaaS applications. Strong understanding of core cloud security concepts, including Identity and Access Management (IAM), network security, data protection, logging, monitoring, infrastructure security, and the shared responsibility model. Extensive hands-on experience with cloud security tools and services native to Azure and GCP (e.g., Defender for Cloud, Sentinel, Security Command Center, VPC-SC) and SaaS security tools (e.g., SSPM, CASB, vendor risk management platforms). Proven experience designing, implementing, and managing security perimeters and controls across complex cloud and SaaS environments. Direct experience interpreting, implementing, and documenting controls based on various security frameworks, including NIST 800-53, ISO 27001, SOC 2, GDPR, and CCPA. Exceptional leadership, communication, and interpersonal skills, with the ability to effectively articulate complex technical concepts and security risks to diverse technical and executive audiences. Master's degree in a relevant field. Professional certifications such as CISSP, CISM, CCSP, or equivalent cloud-specific certifications (e.g., Azure Security Engineer Associate, Google Cloud Professional Cloud Security Engineer). Experience with Infrastructure as Code (IaC) security practices using tools such as Terraform and integrating security into CI/CD pipelines (DevSecOps). Familiarity with secure access service edge (SASE) or zero trust network access (ZTNA) solutions for secure connectivity to cloud and SaaS services. Experience in a highly regulated industry or a large, global enterprise environment. As an established global company, we offer the benefit of choice. You can choose what your Ford future will look like: will your story span the globe, or keep you close to home? Will your career be a deep dive into what you love, or a series of new teams and new skills? Will you be a leader, a changemaker, a technical expert, a culture builder or all of the above? No matter what you choose, we offer a work life that works for you, including: Immediate medical, dental, vision and prescription drug coverage Flexible family care days, paid parental leave, new parent ramp-up programs, subsidized back-up child care and more Family building benefits including adoption and surrogacy expense reimbursement, fertility treatments, and more Vehicle discount program for employees and family members and management leases Tuition assistance Established and active employee resource groups Paid time off for individual and team community service A generous schedule of paid holidays, including the week between Christmas and New Year's Day Paid time off and the option to purchase additional vacation time. https://fordcareers.co/LL5NonHTHD This position is a range of salary grade LL5. Verification of employment eligibility will be required at the time of hire. We are an Equal Opportunity Employer committed to a culturally diverse workforce. All qualified applicants will receive consideration for employment without regard to race, religion, color, age, sex, national origin, sexual orientation, gender identity, disability status or protected veteran status. In the United States, if you need a reasonable accommodation for the online application process due to a disability, please call 1-888-336-0660. LI-Hybrid

Responsibilities

Define and implement a comprehensive cloud security strategy while overseeing a team of security managers. Ensure compliance with regulatory requirements and manage risk assessment programs for cloud infrastructure and SaaS applications.