We are the movers of the world and the makers of the future. We get up every day, roll up our sleeves and build a better world - together. At Ford, we’re all a part of something bigger than ourselves. Are you ready to change the way the world moves?
Enterprise Technology plays a critical part in shaping the future of mobility. If you’re looking for the chance to leverage advanced technology to redefine the transportation landscape, enhance the customer experience and improve people’s lives, this is the opportunity for you. Join us and challenge your IT expertise and analytical skills to help create vehicles that are as smart as you are
This job is posted as REMOTE (EST/CST), but also designated as HYBRID, with up to four days per week onsite may be required for candidates within commuting distance from our Dearborn, MI., offices.
Visa sponsorship is NOT available for this position.
At Ford Motor Company, we believe freedom of movement drives human progress. We also believe in providing you with the freedom to define and realize your dreams. With our incredible plans for the future of mobility, we have a wide variety of opportunities for you to accelerate your career potential as you help us define tomorrow’s transportation.
As a key member of our Information Technology group, you’ll play a critical part in shaping the future of mobility. If you’re looking for the chance to leverage advanced technology to redefine the transportation landscape, enhance the customer experience and improve people’s lives, this is the opportunity for you. Join us and challenge your IT expertise and analytical skills to help create vehicles that are as smart as you are.
The Information Security Policy (ISP) Analyst role is responsible for driving visibility, understanding and consistency of the information security policies, standards, procedures and guidelines which govern the use of information, data, technology, processing systems, and facilities throughout Ford.

The minimum requirements we seek :

• Bachelor’s degree in a Technical Discipline
• 1-3 years of experience working with ISO 27001/2 standards, Information Security policies, or IT risks and controls
• Excellent verbal and written communication
• Strong organizational skills; able to advance multiple work streams concurrently

Our preferred requirements :

• Process improvement mindset
• Experience performing IT risk assessments
• Knowledge of application development and IT security and controls
• Prior experience working with GRC and Policy Management tools
• Understanding of Compliance and Regulatory requirements e.g. (S-Ox, HIPAA, GLBA etc.)

You may not check every box, or your experience may look a little different from what we’ve outlined, but if you think you can bring value to Ford Motor Company, we encourage you to apply!

As an established global company, we offer the benefit of choice. You can choose what your Ford future will look like: will your story span the globe, or keep you close to home? Will your career be a deep dive into what you love, or a series of new teams and new skills? Will you be a leader, a changemaker, a technical expert, a culture builder…or all of the above? No matter what you choose, we offer a work life that works for you, including:

• Immediate medical, dental, vision and prescription drug coverage
• Flexible family care days, paid parental leave, new parent ramp-up programs, subsidized back-up child care and more
• Family building benefits including adoption and surrogacy expense reimbursement, fertility treatments, and more
• Vehicle discount program for employees and family members and management leases
• Tuition assistance
• Established and active employee resource groups
• Paid time off for individual and team community service
• A generous schedule of paid holidays, including the week between Christmas and New Year’s Day
• Paid time off and the option to purchase additional vacation time.

For more information on salary and benefits, click here: https://fordcareers.co/GSR-HTHD
This job is posted as REMOTE (EST/CST), but also designated as HYBRID, with up to four days per week onsite may be required for candidates within commuting distance from our Dearborn, MI., offices.
Visa sponsorship is NOT available for this position.
Candidates for positions with Ford Motor Company must be legally authorized to work in the United States. Verification of employment eligibility will be required at the time of hire.
We are an Equal Opportunity Employer committed to a culturally diverse workforce. All qualified applicants will receive consideration for employment without regard to race, religion, color, age, sex, national origin, sexual orientation, gender identity, disability status or protected veteran status. In the United States, if you need a reasonable accommodation for the online application process due to a disability, please call 1-888-336-0660.

What you’ll be able to do :

• Facilitate the creation and modernization of information security policies, standards, procedures and guidelines
• Work with cross-functional and cross regional Authors and Subject Matter Experts (SMEs) with varying levels of business/technical skills
• Lead the Policy, Control and Risk (PCR) governance process to support risk/control changes, regulatory requirements, emerging technologies, and enterprise objectives
• Execute reviews to ensure proper efficacy, conciseness, and alignment
• Facilitate risk assessments by performing quantitative and qualitative analysis of risk data on Application and Infrastructure Risk/Control Framework
• Provide consultation and direction to IT and business teams pertaining to the ISP
• Promote ISP awareness with audience specific training and communications
• Partner with Authors and SMEs on communication efforts to inform Key Information Security Stakeholders of new and updated policy documents
• Research industry best practices and consult advisory groups
• Identify and implement policy process improvements, integration and automation opportunities
• Incorporate future policy enhancements and innovations into the Governance, Risk and Compliance (GRC) strategy
• Identify policy portal defects and tool enhancements
• Produce monthly policy operations and project metrics
• Support the policy exception request (PER) process, reporting and governance

• Facilitate the creation and modernization of information security policies, standards, procedures and guidelines
• Work with cross-functional and cross regional Authors and Subject Matter Experts (SMEs) with varying levels of business/technical skills
• Lead the Policy, Control and Risk (PCR) governance process to support risk/control changes, regulatory requirements, emerging technologies, and enterprise objectives
• Execute reviews to ensure proper efficacy, conciseness, and alignment
• Facilitate risk assessments by performing quantitative and qualitative analysis of risk data on Application and Infrastructure Risk/Control Framework
• Provide consultation and direction to IT and business teams pertaining to the ISP
• Promote ISP awareness with audience specific training and communications
• Partner with Authors and SMEs on communication efforts to inform Key Information Security Stakeholders of new and updated policy documents
• Research industry best practices and consult advisory groups
• Identify and implement policy process improvements, integration and automation opportunities
• Incorporate future policy enhancements and innovations into the Governance, Risk and Compliance (GRC) strategy
• Identify policy portal defects and tool enhancements
• Produce monthly policy operations and project metrics
• Support the policy exception request (PER) process, reporting and governanc