Sr. Cybersecurity Engineer - Controls Assurance Assessor

General Motors - Warren, MI

Full-time - Mid Level

Hybrid - Warren, MI

Transportation Equipment Manufacturing

About the position

The Sr. Cybersecurity Engineer - Controls Assurance Assessor is responsible for leading assessments of IT controls across various platforms, ensuring compliance with legal and regulatory requirements, and adherence to corporate policies and industry standards. This role involves executing projects, interacting with technical IT personnel, and applying standard auditing methodologies in a corporate environment. The position requires advanced skills in Mainframe OS and Security Tool Administration, as well as strong data manipulation capabilities to perform compliance assessments.

Responsibilities

• Develop a high-level understanding of the control environment.
• Follow the existing assessment objectives and scope of control testing.
• Execute field work and collect/analyze evidence.
• Conclude on the adequacy of the control design and operating effectiveness.
• Document findings and conclusions.
• Report the status and results of the assessment.
• Understand and maintain compliance with GM standards and industry standard methodology.
• Hold themselves and others accountable for demonstrating GM's values and cultural behaviors.
• Model GM behaviors and craft a winning culture.

Requirements

• Bachelor's degree in Information Systems, Computer Science, or related field; equivalent technical experience will be considered in lieu of degree.
• 3+ years of experience in Mainframe Administration.
• 3+ years of formal IT Auditing experience.
• Basic proficiencies in assessing controls design/operating effectiveness, assessing risks, evaluating general IT controls, conducting/facilitating meetings, interviewing auditees/control owners, analyzing data, identifying issues/performing root cause analysis, developing presentations, and documenting results/report writing.
• Technical proficiencies in Mainframe Systems (e.g. RACF, IWS), Middleware (e.g. Tidal Batch), Operating Systems (e.g. MF ZOS, UNIX/LINUX), Database Systems (e.g. POSTGRES, DB2), DevOps Pipeline & Cloud environments, Authentication Systems (e.g. LDAP), File Transfer Systems, and Basic Network knowledge.

Nice-to-haves

• Professional Certifications: CISSP, CISA (preferred), CISM, CIA, CGEIT, CRISC, PMP.

Benefits

• Paid time off including vacation days, holidays, and parental leave for mothers, fathers, and adoptive parents.
• Healthcare (including a triple tax advantaged health savings account and wellness incentive), dental, vision, and life insurance plans.
• Company and matching contributions to 401K savings plan.
• Global recognition program for peers and leaders.
• Tuition assistance and student loan refinancing.
• Discount on GM vehicles for you, your family, and friends.