Senior GRC Engineer: AI-Driven Compliance & Controls

General Motors LLC; Michigan; Hybrid; USD 140,000 - 190,000; Full time

Job summary

General Motors is seeking a Senior Cybersecurity Engineer focused on GRC engineering and technical controls. The role designs and operates control frameworks, conducts risk assessments, and partners with engineering teams to implement and monitor security controls across enterprise, cloud, and vehicle environments.

The candidate will drive automation, CCM, and AI-enabled governance, translating regulatory requirements into measurable controls and building scalable governance workflows that

Qualifications

• Bachelor’s degree in computer science, cybersecurity, information systems, or related field.
• Minimum 7 years in a technical security environment with GRC engineering/DevSecOps focus.
• Hands-on programming with Python, Go, PowerShell, or Bash for integrations.
• Experience with Policy-as-Code concepts and CI/CD pipelines.

Responsibilities

• Architect, build, and maintain data pipelines connecting GRC platforms with cloud environments, CMDBs, IAM tools, vulnerability scanners, and CI/CD pipelines.
• Develop automated evidence collection, automation scripts, and API-integrated workflows to test controls.
• Standardize security policies into machine-readable formats and implement policy guardrails.
• Define CCM, monitor control effectiveness, and flag configuration drifts or gaps in real time.

Skills

GRC engineering

Security engineering

Python

Go

PowerShell

Bash

Policy-as-Code

CI/CD

Cloud platforms

AI & automation

Education

Bachelor's degree in CS/Software/Cybersecurity/Info Systems

Tools

CI/CD tools

Policy engines

Vulnerability scanners

IAM tools

CMDBs

APIs

Job description

General Motors is seeking a Senior Cybersecurity Engineer focused on GRC engineering and technical controls. The role designs and operates control frameworks, conducts risk assessments, and partners with engineering teams to implement and monitor security controls across enterprise, cloud, and vehicle environments.

The candidate will drive automation, CCM, and AI-enabled governance, translating regulatory requirements into measurable controls and building scalable governance workflows that