Senior GRC Engineer: AI-Driven Controls & Compliance Automation

General Motors Corporation; Warren (MI); Hybrid; USD 140,000 - 170,000; Full time

Job summary

General Motors is seeking a Senior Cybersecurity Engineer - GRC Engineering & Technical Controls to advance enterprise risk management, compliance, and control assurance through governance and engineering-driven solutions.

You will design and operate CCM, build data pipelines, codify policies, and partner across teams to apply regulatory requirements into practical controls across enterprise, cloud, and vehicle environments.

Qualifications

• Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, Information Systems, or related field (or equivalent practical experience).
• Minimum of 7 years of progressive experience in a highly technical security environment with emphasis on GRC engineering, security engineering, IT compliance, or DevSecOps.
• Hands-on programming experience with Python, Go, PowerShell, or Bash to build integrations and interface with APIs.
• Hands-on experience or deep knowledge of AI agents, LLMs, and workflow orchestration for automation in security and compliance tasks.
• Strong understanding of policy-as-code, Git-based workflows, CI/CD, and infrastructure governance tools.
• Knowledge of major frameworks (NIST SP 800-53, ISO 27001, SOC 2) and cloud/integration architectures.

Responsibilities

• Architect, build, and maintain data pipelines connecting GRC platforms with cloud environments, CMDBs, IAM tools, vulnerability scanners, and CI/CD pipelines.
• Develop automated evidence collection, connectors, and API-driven workflows to reduce manual audit effort.
• Design policy-as-code and automated control testing to enforce security standards.
• Define, design, and configure automated CCM routines to monitor control effectiveness in near real-time.
• Translate regulatory requirements into actionable technical controls and maintain Unified Controls Framework mappings.

Skills

Python

Go

PowerShell

Bash

AI agents

Policy-as-Code

CI/CD

Education

Bachelor’s degree in Computer Science or related

Tools

Git-based workflows

CI/CD pipelines

Cloud platforms (AWS/Azure/GCP)

IAM models

Vulnerability management

Container deployments

Job description

General Motors is seeking a Senior Cybersecurity Engineer - GRC Engineering & Technical Controls to advance enterprise risk management, compliance, and control assurance through governance and engineering-driven solutions.

You will design and operate CCM, build data pipelines, codify policies, and partner across teams to apply regulatory requirements into practical controls across enterprise, cloud, and vehicle environments.