Director, Business Information Security Officer

The Ford Motor Credit Company team helps put people behind the wheels of great Ford and Lincoln vehicles. By partnering with dealerships, we provide financing, personalized service and professional expertise to thousands of dealers and millions of customers in over one hundred countries around the world.

The BISO for Ford Credit acts as a "mini CISO" and strategic bridge between Ford's central Cybersecurity organization and Ford Credit's business leaders globally. The role translates security/compliance concepts into practical business guidance, ensuring assets stay secure while enabling business goals without slowing operations. It involves advocating for business needs within cybersecurity and maintains a dotted-line reporting relationship to the Ford Motor Company CISO.

• Responsible for Ford Credit cybersecurity globally, with a dotted-line reporting relationship to the Ford Motor Company CISO.
• Lead the global Ford Credit cybersecurity team, providing strategic direction and support to the Information Security Officers (ISOs) of the three Ford Credit banks, who will report to you on a dotted-line basis.

• Serve as the primary cybersecurity point of contact and trusted advisor to Ford Credit business and technology leadership.
• Influence cybersecurity strategies to ensure they are aligned with Ford Credit's critical business processes and customer experiences.
• Evaluate, advise, and partner with business teams on key initiatives, integrating cybersecurity proactively during the idea phase rather than as an afterthought.
• Provide holistic cybersecurity risk metrics, reporting, and strategic timelines to business leadership to set expectations and demonstrate security as a business enabler.

• Drive business cybersecurity accountability by identifying, defining, and supporting the management of cyber-risks specific to Ford Credit.
• Coordinate seamlessly with IT, risk, and compliance teams to ensure your organization effectively executes second line of defense responsibilities, providing robust monitoring, oversight, and independent challenge to Ford Credit's first-line technology and business operations.
• Conduct oversight over projects and portfolios at a strategic level, consulting on risk exceptions, threat modeling, and vulnerability management.
• Partner with third-party risk management teams to assess and manage the security risks of external vendors, suppliers, and partners accessing Ford Credit's sensitive data.

• Collaborate with legal and compliance teams to ensure the cybersecurity program complies with relevant financial industry regulations and data protection laws (OCC GLBA, NYDFS, GDPR, CCPA, DORA).

• Act as the Product Owner of the Data Lake, overseeing the collection of application logs to monitor compliance and safety, ensuring that we find and resolve issues early.
• Leverage a strong knowledge of AI security to guide the safe adoption of Artificial Intelligence as it becomes increasingly ingrained in business operations, coordinating closely with Ford Enterprise teams to align with corporate standards.

• Build psychological safety and trust by demonstrating empathy for business challenges and promoting a balanced approach to risk management.
• Translate cyber intelligence, emerging technology risks, and security impacts into language that business leaders can easily understand and act upon.
• Partner with the training and awareness department to drive a strong security culture within Ford Credit, educating employees on best practices and potential threats.

• Provide cybersecurity incident support as directed by the Security Operations Center (SOC) or incident commander, including participation in after-action reviews (AARs).
• Collaborate with business resiliency leadership to support business continuity and disaster recovery strategies.
• Collaborate with the Risk and Internal Control leadership to help identify, control, and resolve cybersecurity issues.

• Bachelor's degree in computer engineering, computer science, or equivalent industry experience.
• 10+ years of experience working in IT, risk, or cybersecurity organizations.
• 3+ years of experience in a technology leadership role.
• 6+ years of experience working with Banks.
• Significant experience across multiple cyber domains (identity and access management, cloud security, incident response)
• Prior experience with cloud platforms, ideally GCP (Google Cloud Platform).
• Some prior exposure to AI implementation, with experience solving security challenges using AI agents considered a plus.
• Strong technical skills with the ability to implement security solutions effectively.

• Industry-recognized certifications are highly preferred (CISSP, CISM,…