Senior GRC Engineer: Automated Controls & AI Workflows

General Motors; Warren (MI); Hybrid; USD 140,000 - 170,000; Full time

Job summary

General Motors is seeking a Senior Cybersecurity Engineer focused on GRC engineering and technical controls. You will architect and automate governance, risk, and compliance processes across enterprise, cloud, and vehicle environments, translating complex regulations into actionable controls.

The role emphasizes AI-driven governance, policy-as-code, CCM, and automation. You will lead data pipelines, evidence collection, and integration with security technologies to scale assurance and enable

Qualifications

• Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, Information Systems, or related field.
• 7+ years of progressive experience in a highly technical security environment focusing on GRC engineering, security engineering, IT compliance, or DevSecOps.
• Strong programming experience with Python, Go, PowerShell, or Bash to build integrations and APIs.
• Hands-on experience with AI agents, LLM APIs, and workflow orchestration for security tasks.
• Policy-as-Code concepts and familiarity with CI/CD pipelines and infrastructure governance tools.
• Knowledge of major frameworks (NIST 800-53, ISO 27001, SOC 2) and translating regulations into technical controls.
• Experience with cloud infrastructure, IAM models, vulnerability management, and containerized deployments.

Responsibilities

• GRC Engineering, Automation & Systems Architecture: design and implement engineering-driven GRC solutions.
• API & Data Pipeline Engineering: build data pipelines and middleware connecting GRC platforms with cloud environments and tools.
• Automated Evidence Collection: develop connectors and workflows to automate controls testing and evidence gathering.
• Policy-as-Code Development: codify security policies and implement guardrails using policy engines.
• Continuous Control Monitoring: configure automated verification routines to monitor control effectiveness in near real-time.
• AI Governance & Agentic Workflows: develop AI-driven GRC workflows and agentic capabilities for risk assessments and remediation.
• Regulatory Translation & Unified Controls Mapping: translate regulations into technical standards and map obligations to engineering requirements.
• GRC Platform Administration & Telemetry: administer the enterprise GRC/IRM platform and provide dashboards for executives.

Skills

Python

Go

PowerShell

Bash

Education

Bachelor's degree in Computer Science/Engineering/Cybersecurity

Tools

AWS

Azure

GCP

Git

Job description

General Motors is seeking a Senior Cybersecurity Engineer focused on GRC engineering and technical controls. You will architect and automate governance, risk, and compliance processes across enterprise, cloud, and vehicle environments, translating complex regulations into actionable controls.

The role emphasizes AI-driven governance, policy-as-code, CCM, and automation. You will lead data pipelines, evidence collection, and integration with security technologies to scale assurance and enable