Chief Information Security Officer- Ford Credit Bank

Ford • Salt Lake City, UT

4d • $141,700 - $268,300 • Hybrid

About The Position

The Chief Information Security Officer - Data Officer (CISDO) is a high-level bank executive responsible for the dual mandate of securing the organization’s digital assets and governing its data ecosystem. This role involves developing and implementing a comprehensive strategy that ensures data integrity, availability, and privacy and will lead the cybersecurity, data governance, and privacy teams to mitigate risk and protect the bank from cyber security events. We're seeking a highly qualified Chief Information Security & Data Officer (CISDO). The CISDO is a high-level bank executive responsible for the dual mandate of securing the organization’s digital assets and governing its data ecosystem. This role involves developing and implementing a comprehensive strategy that ensures data integrity, availability, and privacy while enabling the business to leverage data as a competitive asset. The CISDO will lead the cybersecurity, data governance, and privacy teams to mitigate risk and protect the bank from cyber security events. The role will work closely to ensure work being done by Ford and Ford Credit meet the requirements of Ford Credit Bank.

Requirements

• Bachelor’s degree in Computer Science, Engineering, Information Systems, or a related field (Master’s degree preferred)
• 15+ years of progressive technology leadership experience, including senior leadership roles
• Significant experience in the banking or financial services industry, with strong understanding of regulated environments
• Proven track record leading large‑scale technology transformations and mission‑critical systems
• Experience with core banking platforms, payment networks, and digital banking ecosystems
• Strong knowledge of cybersecurity frameworks and financial services regulations
• Experience working with cloud platforms (AWS, Azure, GCP) in regulated environments
• Demonstrated success managing large complex organizations and vendor ecosystems
• Strategic thinking and executive‑level communication
• Deep understanding of banking technology and regulations
• Strong risk management and cybersecurity mindset
• Change leadership and transformation management
• Data‑driven decision making
• Ability to balance innovation with stability and compliance
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Data Privacy Solutions Engineer (CDPSE)
• Certified Information Privacy Professional (CIPP)

Responsibilities

• Develop and execute an enterprise-wide strategy for information security and data management that aligns with business goals
• Serve as a key advisor to the CEO and Board of Directors on cybersecurity risks, data privacy regulations, and emerging technology trends
• Establish and maintain the enterprise security vision, strategy, and program to ensure information assets and technologies are adequately protected.
• Direct the development and implementation of security policies, standards, and procedures (e.g., NIST, ISO 27001, SOC2)
• Partner with Risk, Compliance, and Internal Audit teams to meet regulatory requirements (e.g., FFIEC, PCI DSS, SOX, GDPR where applicable)
• Lead incident response planning and execution to minimize the impact of security breaches for the bank
• Oversee continuous monitoring and threat hunting to identify vulnerabilities before they are exploited
• Define the roadmap for data management, including data architecture, data quality standards, and master data management (MDM) for the bank
• Establish a data governance framework to ensure data is accurate, consistent, and accessible across the bank
• Collaborate with business units to identify opportunities for data-driven innovation and improved decision-making
• Ensure the organization meets all regulatory requirements for data protection and privacy (e.g., GDPR, CCPA, HIPAA)
• Implement "Privacy by Design" principles into all new products, services, and internal processes.
• Manage third-party risk assessments and ensure vendors comply with the organization’s security and data standards
• Maintain technology controls to support business continuity, disaster recovery, and operational resilience

Benefits

• Immediate medical, dental, vision and prescription drug coverage
• Flexible family care days, paid parental leave, new parent ramp-up programs, subsidized back-up child care and more
• Family building benefits including adoption and surrogacy expense reimbursement, fertility treatments, and more
• Vehicle discount program for employees and family members and management leases
• Tuition assistance
• Established and active employee resource groups
• Paid time off for individual and team community service
• A generous schedule of paid holidays, including the week between Christmas and New Year’s Day
• Paid time off and the option to purchase additional vacation time.

What This Job Offers

• Job Type: Full-time
• Career Level: Executive