Senior Cybersecurity Controls Engineer (Hybrid)

General Motors; Austin (TX); Hybrid; USD 140,000 - 210,000; Full time

Job summary

General Motors seeks a senior controls engineer to strengthen cybersecurity and IT control environments across SaaS, cloud, and data platforms. You will design, implement, and continuously improve control patterns aligning with NIST, ISO, CIS, and SOX, while translating complex risk into actionable guidance for engineering and product teams.

You’ll partner across Cybersecurity, IT, Finance, and engineering to embed robust controls, enhance GRC tooling, and provide concise, executive‑level

Qualifications

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or equivalent experience.
• 5+ years in cybersecurity engineering, IT audit, GRC, or technology risk roles.
• Familiarity with SOX, PCI, GDPR or CCPA and IT general controls.
• Experience with cloud/SaaS controls and modern enterprise environments.

Responsibilities

• Serve as a subject matter expert for cybersecurity and IT controls across apps, infra, cloud, SaaS, identity, and data environments.
• Translate policies into actionable control requirements for engineering and product teams.
• Develop and support automation, data pipelines, and evidence collection for continuous controls monitoring.
• Partner with security, IT, finance, and business teams to embed preventive and detective controls.

Skills

Cybersecurity engineering

IT audit

GRC

Cross-functional collaboration

Strong communication

Education

Bachelor's degree in Cybersecurity/IS/CS

Tools

ServiceNow IRM

IAM tools

SIEM

Job description

General Motors seeks a senior controls engineer to strengthen cybersecurity and IT control environments across SaaS, cloud, and data platforms. You will design, implement, and continuously improve control patterns aligning with NIST, ISO, CIS, and SOX, while translating complex risk into actionable guidance for engineering and product teams.

You’ll partner across Cybersecurity, IT, Finance, and engineering to embed robust controls, enhance GRC tooling, and provide concise, executive‑level