Senior Cybersecurity Engineer - GRC Engineering & Technical Controls

About the job

Job Description

General Motors is undergoing a major transformation, both in how we operate and in how we will influence the future of transportation. Our Cybersecurity team, part of our Global Enterprise IT org, is on the forefront of this work, emboldening our culture by seeking out determined, innovative individuals who will join our team to help move us forward and achieve our mission.

The Role

The Senior Cybersecurity Engineer - GRC Engineering & Technical Controls is responsible for advancing enterprise cybersecurity risk management, regulatory compliance, and control assurance through a combination of governance expertise and engineering-driven solutions. This role designs, implements, and operates technical control frameworks, conducts risk and compliance assessments, and partners with engineering teams to implement, validate, and continuously monitor security controls across enterprise, cloud, connected vehicle, and operational technology environments. The position leads GRC engineering initiatives focused on automating and scaling governance, risk, and compliance capabilities, including Continuous Control Monitoring (CCM), Compliance-as-Code, Policy-as-Code, automated evidence collection, control validation, workflow orchestration, and AI-enabled governance processes. The engineer translates regulatory, contractual, cybersecurity, privacy, and vehicle cybersecurity requirements into actionable technical controls and measurable assurance activities, while driving integration between GRC platforms, security technologies, cloud services, and enterprise systems.