Senior Cyber & IT Controls Engineer — Drive Risk Posture

General Motors; Michigan; Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid work model

Relocation benefits

Job summary

General Motors in Michigan is seeking a Senior Cybersecurity/IT Controls Engineer to strengthen the control environment across SaaS platforms, cloud-native and hybrid infrastructure, identity, and data environments. You will design, engineer, implement, assess, and continuously improve controls, partnering with Cybersecurity, IT, Finance, engineering, and business teams.

This senior individual contributor role requires challenging weak designs, translating complex technical risk into actionable

Qualifications

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or related field.
• 5+ years of experience in cybersecurity engineering, IT audit, IT risk, or IT controls.
• Strong knowledge of NIST, ISO, CIS, and SOX control frameworks.
• Hands-on experience with cloud platforms, SaaS, identity platforms, and modern enterprise environments.
• Familiarity with SOX, PCI, GDPR, or CCPA regulatory requirements.
• Experience using GRC tools like ServiceNow IRM and evaluating control evidence.

Responsibilities

• Serve as a technical SME for cybersecurity and IT controls across applications, infrastructure, cloud, SaaS, identity, and data environments.
• Design and refine control patterns aligned with NIST, ISO, CIS, and SOX requirements.
• Translate policies into actionable, technically feasible control requirements for engineering and product teams.
• Engineer and enhance controls assurance workflows and data integrations across platforms such as ServiceNow IRM, logging platforms, IAM tools, and cloud-native security capabilities.
• Develop and support automation, scripts, and data pipelines that improve continuous control monitoring, evidence collection, traceability, and scalability.
• Own end-to-end delivery of control assessments, including scoping, execution, documentation, stakeholder alignment, and reporting.

Skills

Cybersecurity engineering

IT risk

GRC

Regulatory compliance

Communication

Project management

Education

Bachelor's degree in Cybersecurity or related field

Tools

ServiceNow IRM

IAM tools

Logging platforms

Cloud security tooling

Data pipelines

Job description

General Motors in Michigan is seeking a Senior Cybersecurity/IT Controls Engineer to strengthen the control environment across SaaS platforms, cloud-native and hybrid infrastructure, identity, and data environments. You will design, engineer, implement, assess, and continuously improve controls, partnering with Cybersecurity, IT, Finance, engineering, and business teams.

This senior individual contributor role requires challenging weak designs, translating complex technical risk into actionable