Lead Auditor Cybersecurity Assurance

Job Description

General Motors Audit Services (GMAS) is seeking a Lead Auditor Cybersecurity Assurance to lead risk-based cybersecurity assurance engagements across a complex global environment. This role is responsible for planning executing and reporting on reviews that evaluate the design and operating effectiveness of cybersecurity and technology controls.

This individual will work across a broad range of domains including enterprise technology cloud identity and access management application security incident response and infrastructure security. The role also partners closely with business and technology leaders to communicate risk drive practical remediation and help strengthen GMs overall cybersecurity posture.

This is a strong opportunity for a cybersecurity audit professional who wants exposure to a large-scale highly connected environment and enjoys combining technical depth sound judgment and leadership.

What Youll Do

• Lead end-to-end cybersecurity assurance engagements including scoping planning fieldwork issue development and reporting.

• Evaluate the effectiveness of cybersecurity controls across key risk areas such as identity and access management logging and monitoring vulnerability management incident response backup and recovery and security configuration.

• Apply a risk-based perspective to identify control gaps emerging threats and opportunities to improve cybersecurity resilience.

• Review testing workpapers and evidence to ensure conclusions are clear supportable and aligned to audit standards and methodology.

• Develop concise executive-ready reports that clearly articulate risk root cause and practical corrective actions.

• Present results and themes to business and technology leaders including senior management and align remediation priorities.

• Coach and support team members throughout the audit lifecycle including testing strategy issue validation and stakeholder communication.

• Build strong working relationships with stakeholders across cybersecurity IT privacy compliance and other relevant functions.

• Contribute to continuous improvement of the cybersecurity assurance program including risk assessment planning and reusable testing approaches.

• Monitor remediation activity and validate that agreed actions appropriately address identified risk.

• Maintain a strong understanding of GM operations and technology landscape to anticipate emerging cyber risks and adapt assurance coverage accordingly.

Your Skills & Abilities (Required Qualifications)

• Bachelors degree in Information Systems Computer Science Cybersecurity or a related field (or equivalent related experience).

• 5 years of experience in IT audit cybersecurity risk management or technology assurance including leading engagements and guiding teams through planning testing and reporting.

• Strong understanding of cybersecurity and technology risk including evaluating confidentiality integrity and availability (CIA) across complex interconnected systems.

• Strong knowledge of internal controls and risk frameworks such as NIST CSF NIST 800-53 COBIT ISO 27001 or similar frameworks with the ability to translate requirements into practical test procedures

• Understanding of technology infrastructure and operations (e.g. endpoint/server hardening monitoring backup/recovery and change/release practices) and how to evaluate control effectiveness.

• Experience assessing controls across core cybersecurity domains such as Identity & Access Management (IAM) privileged access logging and monitoring incident response backup and recovery vulnerability management and security configuration controls.

• Strong written and verbal communication skills including the ability to communicate technical risk clearly to non-technical stakeholders and senior leaders

• Demonstrated ability to work independently exercise sound judgment manage multiple priorities and deliver results in a fast-paced environment.

• Domestic travel: 5%10%. International travel: possible

What Will Give You A Competitive Edge (Preferred Qualifications)

• Graduate degree in Information Technology Cybersecurity or a related field.

• Professional certification(s) such as CISA CISSP CISM CRISC CEH or other relevant security or technology certifications.

• Big 4 public accounting firm experience and/or a recognized internal audit/assurance program.

• Working knowledge of networking and security technologies (e.g. routing/switching ACLs IDS/IPS firewalls and secure remote access).

• Working knowledge of application security concepts including secure development practices vulnerability management and common testing approaches.

• Familiarity with operating system platforms (e.g. UNIX/Linux Windows) and security best practices for each.

• Hands-on experience with scripting automation or data analysis to enable more efficient testing (e.g. PowerShell Python SQL)

• Strong interpersonal skills and demonstrated people leadership (e.g. coaching delegation conflict resolution and stakeholder management).

• Strong analytical problem-solving and professional judgment skills with the ability to prioritize and make risk-based decisions.

Location: Hybrid. This role is categorized as hybrid. This means the successful candidate is expected to report to the - Global HQ Detroit MI three times per week at minimum or other frequency dictated by the business

Relocation: This role is NOT eligible for relocation benefits.

GM DOES NOT PROVIDE IMMIGRATION-RELATED SPONSORSHIP FOR THIS ROLE. DO NOT APPLY FOR THIS ROLE IF YOU WILL NEED GM IMMIGRATION SPONSORSHIP NOW OR IN THE FUTURE. THIS INCLUDES DIRECT COMPANY SPONSORSHIP ENTRY OF GM AS THE IMMIGRATION EMPLOYER OF RECORD ON A GOVERNMENT FORM AND ANY WORK AUTHORIZATION REQUIRING A WRITTEN SUBMISSION OR OTHER IMMIGRATION SUPPORT FROM THE COMPANY (e.g. H-1B OPT STEM OPT CPT TN J-1 etc.)

About GM

Our vision is a world with Zero Crashes Zero Emissions and Zero Congestion and we embrace the responsibility to lead the change that will make our world better safer and more equitable for all.

Why Join Us

We believe we all must make a choice every day individually and collectively to drive meaningful change through our words our deeds and our culture. Every day we want every employee to feel they belong to one General Motors team.

Benefits Overview

From day one were looking out for your well-beingat work and at homeso you can focus on realizing your ambitions. Learn how GM supports a rewarding career that rewards you personally by visiting Total Rewards resources.

Non-Discrimination and Equal Employment Opportunities (U.S.)

General Motors is committed to being a workplace that is not only free of unlawful discrimination but one that genuinely fosters inclusion and belonging. We strongly believe that providing an inclusive workplace creates an environment in which our employees can thrive and develop better products for our customers.

All employment decisions are made on a non-discriminatory basis without regard to sex race color national origin citizenship status religion age disability pregnancy or maternity status sexual orientation gender identity status as a veteran or protected veteran or any other similarly protected status in accordance with federal state and local laws.

We encourage interested candidates to review the key responsibilities and qualifications for each role and apply for any positions that match their skills and capabilities. Applicants in the recruitment process may be required where applicable to successfully complete a role-related assessment(s) and/or a pre-employment screening prior to beginning employment. To learn more visit How we Hire.

Accommodations

General Motors offers opportunities to all job seekers including individuals with disabilities. If you need a reasonable accommodation to assist with your job search or application for employment email us or call your email please include a description of the specific accommodation you are requesting as well as the job title and requisition number of the position for which you are applying.