Senior GRC Engineer: AI-Driven Controls & Compliance

General Motors (GM); Warren (MI); Hybrid; USD 140,000 - 190,000; Full time

Job summary

General Motors is seeking a Senior Cybersecurity Engineer to advance enterprise GRC engineering, automate controls, and implement AI-enabled governance across enterprise and cloud environments.

The role focuses on building data pipelines, policy-as-code, and continuous control monitoring to ensure regulatory compliance and effective risk management. Hybrid work model with collaboration across Global Enterprise IT teams.

Qualifications

• Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, Information Systems, or related technical discipline (or equivalent practical experience).
• Minimum of 7 years of progressive experience operating in a highly technical security environment, with a strong focus on GRC engineering, security engineering, IT compliance, or DevSecOps.
• Strong hands-on programming experience with Python, Go, PowerShell, or Bash to build integrations, handle data parsing, and interface with APIs.
• Hands-on experience or deep conceptual knowledge of leveraging AI agents, LLM APIs, and workflow orchestration frameworks to automate security and compliance tasks.
• Solid understanding of Git-based workflows, CI/CD pipelines, and infrastructure governance tools. Familiarity with Policy-as-Code concepts.
• Framework & Compliance Expertise: Knowledge of major industry security frameworks (NIST SP 800-53, ISO 27001, SOC 2) and translating regulatory/certification requirements into technical controls.
• Technical Environment Acumen: Practical knowledge of cloud infrastructure (AWS, Azure, or GCP), IAM models, vulnerability management architectures, and containerized deployments.

Responsibilities

• Architect, build, and maintain data pipelines connecting GRC platforms with cloud environments, CMDBs, IAM tools, vulnerability scanners, and CI/CD pipelines.
• Develop custom connectors, automation scripts, and API-integrated workflows to automate controls testing and evidence gathering.
• Standardize and codify security policies into machine-readable formats; implement guardrails using policy engines and IaC checking tools.
• Define, design, and configure automated verification routines to monitor control effectiveness in near real-time and flag drift or gaps.
• Develop and orchestrate AI-driven GRC workflows to automate risk assessments, control validation, and evidence classification.
• Translate regulatory, privacy, and industry requirements into engineering-focused technical control standards; maintain Unified Controls Framework mappings.
• Serve as technical administrator for the enterprise GRC/IRM platform; configure workflows, schemas, and API access.

Skills

GRC engineering

Security engineering

DevSecOps

Python

Go

PowerShell

Bash

AI/LLM integration

Policy-as-Code

CI/CD pipelines

Cloud IAM

Vulnerability management

Containers

Education

Bachelor’s degree in Computer Science or related field

Tools

Git

APIs

CI/CD tools

Job description

General Motors is seeking a Senior Cybersecurity Engineer to advance enterprise GRC engineering, automate controls, and implement AI-enabled governance across enterprise and cloud environments.

The role focuses on building data pipelines, policy-as-code, and continuous control monitoring to ensure regulatory compliance and effective risk management. Hybrid work model with collaboration across Global Enterprise IT teams.