Senior IT Controls & Cybersecurity Engineer

General Motors; Austin (TX); Hybrid; USD 140,000 - 180,000; Full time

Job summary

General Motors seeks a senior cybersecurity controls professional to design, implement, and continuously improve IT control environments across cloud, SaaS, and data platforms. You will translate standards into actionable requirements and own end-to-end control assessments, partnering with cybersecurity, IT, finance, and engineering teams.

You will enhance automation, monitoring, and evidence collection while aligning with NIST, ISO, CIS, and SOX.

Qualifications

• Bachelor’s degree in cybersecurity, information systems, computer science, or related field, or equivalent experience.
• 5+ years of experience in cybersecurity engineering, IT audit, GRC, technology risk or IT controls assurance.
• Strong understanding of NIST, ISO, CIS and IT general controls.
• Hands-on experience with controls across cloud, SaaS, identity, and data environments.
• Familiarity with SOX, PCI, GDPR or CCPA regulatory requirements.
• Experience using GRC tools such as ServiceNow IRM and evaluating control evidence.
• Ability to identify systemic and architectural risks and propose risk-based solutions.
• Excellent written and verbal communication and stakeholder management.
• Strong organizational skills for multiple assessments and remediation priorities.

Responsibilities

• Serve as a technical subject matter expert for cybersecurity and IT controls across applications, infrastructure, cloud, SaaS, identity, and data environments.
• Design and refine control patterns, guardrails, and reference architectures aligned with NIST, ISO, CIS, and SOX.
• Translate policies and standards into actionable, technically feasible control requirements for engineering and product teams.
• Engineer and enhance controls assurance workflows and data integrations across platforms such as ServiceNow IRM and IAM tools.
• Develop and support automation, scripts, and data pipelines for continuous control monitoring and evidence collection.
• Partner with platform, IAM, vulnerability management, cloud security, data protection, and third-party risk teams.
• Own end-to-end delivery of control assessments, including scoping, execution, documentation, and reporting.
• Assess the design and operating effectiveness of controls across applications, infrastructure, cloud, SaaS, identity, and data platforms.
• Evaluate technical evidence to determine control effectiveness and identify improvement opportunities.
• Identify control gaps and recommend practical, risk-based improvements.
• Validate remediation addresses root cause and aligns with GM standards and regulations.
• Assess cyber and IT risks considering threats, vulnerabilities, data sensitivity, and business impact.
• Prioritize issues and articulate risk tradeoffs and recommendations to control owners.
• Provide executive-ready reporting on control posture and remediation status.
• Clarify control ownership across Cybersecurity, IT, and business teams.
• Advance continuous controls monitoring, automation, and data-driven assurance practices.

Skills

5+ years experience

Cybersecurity frameworks

Cloud security

GRC tools

Regulatory standards

Control evidence evaluation

Risk-based remediation

Communication

Stakeholder management

Education

Bachelor’s degree in Cybersecurity/IS/CS or related

Tools

ServiceNow IRM

Job description

General Motors seeks a senior cybersecurity controls professional to design, implement, and continuously improve IT control environments across cloud, SaaS, and data platforms. You will translate standards into actionable requirements and own end-to-end control assessments, partnering with cybersecurity, IT, finance, and engineering teams.

You will enhance automation, monitoring, and evidence collection while aligning with NIST, ISO, CIS, and SOX.