IT Security & Controls Senior Analyst

This role requires a blend of technical expertise, analytical skills, and a strong understanding of security principles, risk management frameworks and compliance regulations. This is a leadership role demanding strong communication, analytical, and problem-solving skills, that would provide guidance and mentoring for Security & Controls Junior analysts.

Security, Controls & Compliance

• Collaborate at Group level to enhance internal policies, standards, and controls.
• Advise Software Engineering teams on meeting compliance and control requirements.
• Conduct IT due diligence assessments of third-party ICT service providers to ensure alignment with leading information security standards.
• Identify and report gaps in compliance with key regulations (e.g., SOX, GDPR, DORA).
• Lead the remediation of complex audit findings and internal control issues, coordinating corrective actions and defining best practices.
• Develop and deliver awareness materials and contribute to reporting for senior risk and resilience committees.

Cyber Security

• Represent the company at FS-ISAC events and other industry forums.
• Collaborate with global Ford Credit and FMC Cyber Defence teams to align strategies with FCE\’s needs.
• Monitor cybersecurity trends and innovations, identifying opportunities to strengthen our cyber defense posture.
• Attend external cybersecurity events and share key insights with internal stakeholders.

Qualifications

• Degree in IT, Cybersecurity, or related field (minimum 2:2 or international equivalent).
• Experience in IT Security, with a strong controls mindset and background in system development or management.
• Familiarity with SOC 2 Type II, ISO 27001, or similar standards.
• Solid understanding of cybersecurity threats, controls, and incident response.
• Strong organizational, communication, and documentation skills.
• Ability to assess risks and develop practical security solutions.

Desirable

• Certifications such as CRISC, CISM, CISSP, CISA.
• Knowledge of ICT regulations (e.g., DORA, SYSC8, BaFin).
• Experience in financial services or regulated environments.
• Cloud security expertise (AWS, Azure, GCP).
• Experience in security awareness and training.