Cybersecurity Analyst

GM Financial; Irving (TX); Hybrid; USD 75,000 - 110,000; Full time

Benefits offered by this job

401K matching

Bonding leave for new parents

Tuition assistance

Training

GM employee auto discount

Community service pay

Nine company holidays

Job summary

GM Financial is seeking a Cybersecurity Analyst to coordinate issues through the remediation lifecycle, document plans with owners and milestones, and report progress to leadership. You will work with offensive security and other teams to validate findings, while maintaining rigorous documentation and stakeholder communications.

The role emphasizes handling multiple remediation efforts, interpreting network, cloud and identity security issues, and delivering clear status updates for executives

Qualifications

• Experience in remediation management or issues management with direct exposure to tracking and remediating cybersecurity findings.
• Familiarity with common security tooling and ability to interpret outputs; basic scripting (PowerShell or Bash) preferred.
• Foundational understanding of cybersecurity principles, threats, and controls.
• Ability to analyze information, identify trends, and assess risk impacts.
• Strong organizational and multitasking skills to handle competing priorities in a fast-paced environment.
• Excellent written and verbal communication tailored for technical and non-technical stakeholders.

Responsibilities

• Coordinate cyber security issues through remediation lifecycle from intake to closure.
• Document remediation plans with owners, target dates, milestones and track progress.
• Follow up to monitor remediation efforts, escalate risks and aging issues as needed.
• Interpret technical issues across network, cloud, identity, and app security domains for risk communication.
• Collaborate with Offensive Security and other teams on findings and validation requirements.
• Maintain accurate documentation, evidence, and status updates in workflow systems.
• Develop and deliver reporting to leadership showing remediation progress and risk posture.
• Identify opportunities to improve issue management processes and governance.

Skills

Remediation management

Issues management

Vulnerability management

Security fundamentals

Stakeholder communication

Analytical thinking

Prioritization

Collaboration across teams

Scripting (PowerShell or Bash)

Documentation & reporting

Education

Bachelor’s degree in related field or equivalent

High School Diploma or equivalent

Tools

Issue tracking tools

Workflow management

Cybersecurity platforms

Job description

Why GM Financial Cybersecurity?

Innovation isn’t just a talking point at GM Financial, it’s how we operate. By joining our team, you’ll work in a mission-focused environment with specialized teams, including Engineering, Threat Intelligence, Vulnerability Management, Incident Response, Firewall, Governance, Risk, Architecture and Offensive Security. These teams collaborate to identify, manage and respond to threats, all while driving innovation across the environment.

Job Description

Innovation isn’t just a talking point at GM Financial, it’s how we operate. By joining our team, you’ll work in a mission-focused environment with specialized teams, including Engineering, Threat Intelligence, Vulnerability Management, Incident Response, Firewall, Governance, Risk, Architecture and Offensive Security. These teams collaborate to identify, manage and respond to threats, all while driving innovation across the environment.

Cybersecurity is central to our strategic vision, so you’ll benefit from exceptional leadership visibility, with direct reporting lines to the CEO. This structure ensures your work is recognized and supported at the highest levels, while also enabling bold innovation and the adoption of cutting-edge technologies.

Shape the future of Cybersecurity at GM Financial, with the freedom to explore, the tools to build and the support to thrive.

This position will be posted until filled.

About the role

The Cybersecurity Analyst is responsible for coordinating the Cybersecurity Issues Management process and managing issues through the remediation lifecycle. This role facilitates issue intake activities, identifies and engages accountable owners, documents remediation plans, tracks progress against established milestones, and conducts ongoing follow-up with stakeholders to support timely remediation.

This role requires the ability to coordinate and prioritize multiple remediation efforts simultaneously, communicate effectively with stakeholders at all levels, and interpret technical issues and supporting evidence. The analyst leverages cybersecurity, vulnerability management, reporting, and workflow management tools to track progress, validate supporting evidence, and provide meaningful status reporting to stakeholders and leadership.

In This Role You Will

• Manage cybersecurity issues throughout the remediation lifecycle, from intake and assignment through remediation validation and closure.
• Partner with issue owners and technical stakeholders to document remediation plans, target dates, key milestones, and track progress toward remediation objectives.
• Conduct ongoing follow-up activities to monitor remediation efforts, identify obstacles, drive accountability, and elevate risks, delays, and aging issues as appropriate.
• Research and interpret technical issues across a variety of domains, including network, Active Directory, web application, cloud, and infrastructure security, to effectively communicate risk and remediation plan with both technical and non-technical stakeholders.
• Coordinate regularly with Offensive Security and other Cybersecurity teams on finding statuses and validation requirements.
• Maintain accurate documentation, remediation records, status updates, and supporting evidence within designated workflow and tracking systems.
• Develop, maintain, and deliver reporting and metrics that provide leadership visibility into remediation progress, issue aging, trends, and overall cybersecurity risk posture.
• Identify opportunities to enhance issue management processes, reporting capabilities, and governance practices to improve efficiency, consistency, and stakeholder experience.

Qualifications

• Experience in remediation management, issues management, vulnerability management, or similar role with direct exposure to tracking and remediating cybersecurity findings.
• Working familiarity with common security and reconnaissance tooling sufficient to interpret and validate output, as well as basic scripting ability (PowerShell or Bash preferred).
• Foundational understanding of cybersecurity principles, vulnerabilities, threats, and security controls.
• Ability to analyze information, identify trends, and evaluate potential business and risk impacts.
• Strong organizational skills with demonstrated ability to manage competing priorities and deadlines in a fast-paced environment.
• Effective written and verbal communication skills, including the ability to tailor communications for technical and non-technical audiences.
• Ability to build collaborative relationships and work effectively across cybersecurity, technology, and business teams.
• Knowledge of cybersecurity frameworks and industry standards such as NIST Cybersecurity Framework (CSF), NIST 800-53, ISO 27001, or similar frameworks.
• Understanding of common technology domains including networking, infrastructure, cloud, identity and access management, and application security.
• Strong analytical, problem-solving, and critical thinking skills.
• Experience interpreting technical documentation, issues, vulnerabilities, and remediation evidence.
• Experience with issue tracking, workflow management, reporting, or cybersecurity platforms is preferred.
• Demonstrated ability to independently investigate technical findings using open-source research to proactively close any gaps in technical understanding.

Experience and Education

• Minimum of 1-5 years of experience in large and complex business environment with a successful track record working directly with senior level management preferred
• At least 1 year of experience in one or more of the following domains: Access Control, Telecom and Network Security, Cybersecurity Governance, Risk Management, Software Development Security, Cryptography, Security Architecture and Design, Operational Security, Business Continuity & Disaster Recovery, Legal Regulations, Investigations and Compliance, Physical (Environmental) Security, IT or Security Audit, IT or Security Compliance preferred
• Experience with UML Design Tools preferred
• Experience with alternate management methods using SSH, serial connections, and the command-line interface TMSH preferred
• Experience in documentation tools such as Visio and Microsoft Office products preferred
• Experience with Network and VLAN segmentation preferred
• Experience with technical writing preferred
• High School Diploma or equivalent required
• Bachelor’s Degree in related field or equivalent work experience strongly preferred

Licenses and Certifications

Information Security Certifications strongly preferred

What We Offer

• 401K matching
• bonding leave for new parents (12 weeks, 100% paid)
• tuition assistance
• training
• GM employee auto discount
• community service pay
• nine company holidays

Our Culture

Our team members define and shape our culture - an environment that welcomes innovative ideas, fosters integrity, and creates a sense of community and belonging. Here we do more than work - we thrive.

Compensation

Competitive pay and bonus eligibility.

Work Life Balance

Hybrid work environment, 4-days a week in office.

NOTE: We are unable to consider candidates who require visa sponsorship for this position

This position is not open to agency submissions