General Motors
Senior Cybersecurity & IT Controls Engineer
Warren, Michigan, United States of America +1 · Hybrid · Senior · Full-time · Posted Aug 28, 2026
- Location
- Warren, Michigan, United States of America
Austin, Texas, United States of America - Experience
- 5+ years in cybersecurity engineering, IT audit, GRC, technology risk, or IT controls assurance.
- Education
- Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related field, or equivalent experience.
- Visa sponsorship
- GM does not provide immigration-related sponsorship for this role, now or in the future.
About the job
Designs and improves cybersecurity and IT controls, assesses their effectiveness across technology environments, and reports risk and remediation insights to stakeholders and leadership.
What you'll do
- Design, implement, and continuously improve technical controls, control patterns, and assurance workflows across cloud, SaaS, identity, infrastructure, and data environments.
- Lead end-to-end control assessments, evaluate technical evidence, identify gaps, and validate sustainable remediation.
- Automate monitoring and evidence collection, improve GRC tooling and reporting, and communicate control posture and risk recommendations.
What they ask for
- Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related field, or equivalent experience.
- 5+ years of experience in cybersecurity engineering, IT audit, GRC, technology risk, or IT controls assurance.
- Strong understanding of NIST, ISO, and CIS frameworks and IT General Controls; hands-on controls and security experience across cloud platforms, SaaS, and identity platforms.
- Experience with controls assurance or GRC tools such as ServiceNow IRM, and evaluating technical control evidence.
Nice to have
- Relevant certifications such as CISA, CISSP, CRISC, CISM, or CCSP.
- Experience advancing automation, continuous monitoring, or data-driven controls reporting through AI, scripting, data analytics, or dashboarding.
Tools
ServiceNow IRM, NIST, ISO, CIS, SOX, PCI, GDPR, CCPA
AI focus
Preferred experience includes advancing automation, continuous monitoring, or data-driven controls reporting through AI; AI-enabled services are among the environments covered by the role.
Model-written summary · the original posting is authoritative