Director, Business Information Security Officer

We made history and now we work to transform the future – for our customers, our communities and our families. You'll see your work on the road every day, helping people move freely and pursue their dreams. At Ford, you can build more than vehicles. Come build what matters. The **Ford Motor Credit** Company team helps put people behind the wheels of great Ford and Lincoln vehicles. By partnering with dealerships, we provide financing, personalized service and professional expertise to thousands of dealers and millions of customers in over one hundred countries around the world. **In this position...** The BISO for Ford Credit acts as a "mini CISO" and strategic bridge between Ford's central Cybersecurity organization and Ford Credit's business leaders globally. The role translates security/compliance concepts into practical business guidance, ensuring assets stay secure while enabling business goals without slowing operations. It involves advocating for business needs within cybersecurity and maintains a dotted-line reporting relationship to the Ford Motor Company CISO. Reporting Scope & Leadership Accountability - Responsible for Ford Credit cybersecurity globally, with a dotted-line reporting relationship to the Ford Motor Company CISO. - Lead the global Ford Credit cybersecurity team, providing strategic direction and support to the Information Security Officers (ISOs) of the three Ford Credit banks, who will report to you on a dotted-line basis. ### Responsibilities **What you'll do...** **Strategic Alignment & Trusted Advisor** - Serve as the primary cybersecurity point of contact and trusted advisor to Ford Credit business and technology leadership. - Influence cybersecurity strategies to ensure they are aligned with Ford Credit's critical business processes and customer experiences. - Evaluate, advise, and partner with business teams on key initiatives, integrating cybersecurity proactively during the idea phase rather than as an afterthought. - Provide holistic cybersecurity risk metrics, reporting, and strategic timelines to business leadership to set expectations and demonstrate security as a business enabler. **Cyber Risk Management & Business Accountability** - Drive business cybersecurity accountability by identifying, defining, and supporting the management of cyber-risks specific to Ford Credit. - Coordinate seamlessly with IT, risk, and compliance teams to ensure your organization effectively executes second line of defense responsibilities, providing robust monitoring, oversight, and independent challenge to Ford Credit’s first-line technology and business operations. - Conduct oversight over projects and portfolios at a strategic level, consulting on risk exceptions, threat modeling, and vulnerability management. - Partner with third-party risk management teams to assess and manage the security risks of external vendors, suppliers, and partners accessing Ford Credit’s sensitive data. **Regulatory Compliance & Governance** - Collaborate with legal and compliance teams to ensure the cybersecurity program complies with relevant financial industry regulations and data protection laws (e.g., OCC GLBA, NYDFS, GDPR, CCPA, DORA). **Technology, Data & AI Security Oversight** - Act as the Product Owner of the Data Lake, overseeing the collection of application logs to monitor compliance and safety, ensuring that we find and resolve issues early. - Leverage a strong knowledge of AI security to guide the safe adoption of Artificial Intelligence as it becomes increasingly ingrained in business operations, coordinating closely with Ford Enterprise teams to align with corporate standards. **Communication, Culture & Security Awareness** - Build psychological safety and trust by demonstrating empathy for business challenges and promoting a balanced approach to risk management. - Translate cyber intelligence, emerging technology risks, and security impacts into language that business leaders can easily understand and act upon…