Senior Cybersecurity Engineer – GRC Engineering, Technical Controls

General Motors

. Advance enterprise cybersecurity risk management, regulatory compliance, and control assurance .

Posted 10/14/2026full-timeWarren • Michigan • United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in enterprise cybersecurity risk management, regulatory compliance, and GRC engineering, with a strong focus on implementing technical control frameworks and automated workflows. Proficient in programming and integrating AI-driven solutions for compliance and risk assessment.

Highest-signal resume keywords

GRC EngineeringPython ProgrammingAI Agents IntegrationNIST SP 800-53 KnowledgeAWS Cloud Proficiency

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

GRC EngineeringPython ProgrammingGo ProgrammingPowerShell ScriptingBash ScriptingAI AgentsLLM APIsCI/CD PipelinesInfrastructure GovernancePolicy-as-Code

Tools & Technologies

AWSAzureGCPIAM ToolsVulnerability ScannersCI/CD PipelinesGRC PlatformsUnified Controls FrameworkAutomation ScriptsRelational Schemas

Certifications & Qualifications

CISSPCRISCCISACGRC

Industry Keywords

CybersecurityRegulatory ComplianceControl AssuranceTechnical AuditsSecurity FrameworksCompliance TelemetryControl ValidationRisk AssessmentsEvidence ClassificationConfiguration Drift

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud PlatformPythonGo

About the role

Key responsibilities & impact

Advance enterprise cybersecurity risk management, regulatory compliance, and control assurance
Design, implement, and operate technical control frameworks across enterprise, cloud, connected vehicle, and operational technology environments
Lead GRC engineering initiatives involving Continuous Control Monitoring, Compliance-as-Code, Policy-as-Code, automated evidence collection, control validation, workflow orchestration, and AI-enabled governance
Architect and maintain APIs, data pipelines, and middleware connecting GRC platforms with cloud environments, CMDBs, IAM tools, vulnerability scanners, and CI/CD pipelines
Develop connectors, automation scripts, and API-integrated workflows for automated control testing and evidence gathering
Standardize security policies into machine-readable formats and implement cloud-native guardrails and infrastructure-as-code checks
Configure automated verification routines to monitor control effectiveness and detect configuration drift or compliance gaps
Develop AI-driven GRC workflows and agentic capabilities for risk assessments, control validation, and evidence classification
Integrate AI agents and LLM-powered pipelines with GRC platforms to generate compliance scorecards and remediation recommendations
Interpret global, regional, and industry-specific regulations and translate them into technical control standards
Maintain bidirectional traceability in a Unified Controls Framework mapping obligations to engineering requirements
Conduct scheduled, event-driven, and automated technical audits to validate control implementations
Administer the enterprise GRC/IRM platform, including workflows, relational schemas, and API access
Establish compliance telemetry and executive dashboards for control coverage, deficiency aging, and real-time posture indicators
Partner with business, compliance, product, technology, and engineering teams

Requirements

What you’ll need

Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, Information Systems, or a related technical discipline, or equivalent practical experience
Minimum of 7 years of progressive experience in a highly technical security environment, focused on GRC engineering, security engineering, IT compliance, or DevSecOps
Strong hands-on programming experience with Python, Go, PowerShell, or Bash
Hands-on experience or deep conceptual knowledge of AI agents, LLM APIs, and workflow orchestration frameworks
Understanding of Git-based workflows, CI/CD pipelines, infrastructure governance tools, and Policy-as-Code concepts
Practical knowledge of NIST SP 800-53, ISO 27001, SOC 2, or comparable security frameworks
Experience translating regulatory and certification requirements into technical controls
Practical knowledge of AWS, Azure, or GCP; modern IAM models; vulnerability management architectures; and containerized deployments
At least one active, industry-recognized professional certification in risk, audit, or security engineering, such as CISSP, CRISC, CISA, or CGRC
Must not require GM immigration sponsorship now or in the future, including H1-B, OPT, STEM OPT, CPT, TN, or J-1 support

Benefits

Comp & perks

Benefits and Total Rewards resources supporting well-being at work and home
Hybrid work arrangement
Role-related assessment and/or pre-employment screening may be required
Reasonable workplace accommodations available
No relocation benefits; relocation costs are the selected candidate’s responsibility