Cybersecurity Analyst

About the Role

The Cybersecurity Analyst is responsible for executing a portion of the GM Financial (GMF) Cybersecurity Program. This role aims to advise the organization on its management of Cybersecurity risk by organizing information, enabling risk management decisions, and addressing threats to ensure the security of company systems and information assets. The Cybersecurity Analyst will contribute to the success of comprehensive security initiatives, work with internal and external groups to ensure program effectiveness and efficiency, and develop strong partnerships with business partners across the enterprise to ensure company information assets are protected at the appropriate level.

Key Responsibilities

• Demonstrate proficiency in developing and updating Cybersecurity policies, standards, and procedures referencing NIST 800-53 controls and the NIST Cyber Security Framework.
• Implement revisions in accordance with updates in relevant regulatory or industry Cybersecurity practices.
• Experience with audit management and tracking of remediation items and/or findings to completion.
• Demonstrate capability to collaborate with business partners to manage Cybersecurity needs.
• Develop security requirements to protect the company from external and internal threats.
• Document and report policy or procedure discrepancies and/or change requests.
• Initiate, facilitate, and promote Cybersecurity within the organization.
• Monitor adherence to Cybersecurity policies, standards, and controls.

Requirements & Tech Stack

• Local and wide area networking concepts, principles, and protocols
• Advanced knowledge in Infrastructure design and management
• Working knowledge of management processes such as personnel administration, planning, and budgeting
• Strong working knowledge of Intel platforms, iSeries, and pSeries servers
• Advanced understanding of IT Service Management (ITSM) best practices and processes
• Advanced knowledge of TCP/IP, OSI model, and subnetting
• High-level understanding of technology infrastructure, security concepts, and platforms
• Demonstrated success in project management
• Advanced knowledge of IBM pSeries hardware, operating systems, and TSM backup infrastructure
• Advanced knowledge of the OSI model and associated security for each layer
• Understanding of routing and switching protocols as they relate to load balancing
• Strong understanding of application layer protocols including HTTP, SSH, SSL, and DNS
• Knowledge and ability to stay abreast on the latest security and privacy legislation, regulations, advisories, alerts, and vulnerabilities
• Knowledge of IT security processes and controls as well as IT infrastructure and networking technical knowledge
• Understanding of cloud technologies and concepts
• Familiarity with DevOps and Agile development processes
• Ability to think strategically and make collaborative decisions
• Detail oriented
• Ability to apply structured analysis methods to various types of data to establish trends, determine variability, and business impact.
• Ability to effectively negotiate with vendors on upgrades and acquisitions.
• Effective planning, time management, negotiation, and delegation skills.
• Information security standards/frameworks (i.e., NIST Cybersecurity Framework, ISO 27001) skills.
• Analytical skills

Additional Knowledge and Skills

Working effectively within an AI enabled environment:

• Ability to use AI tools (e.g., Microsoft Copilot) to support daily work.
• Skills in evaluating AI outputs for accuracy, compliance, and bias.
• Experience integrating AI into workflows to improve efficiency or insights.
• Familiarity with AI assisted research, summarization, and content generation.
• Understanding of responsible AI use, including ethics and data protection.

Work Experience and Education

• Minimum of 1-5 years experience in a large and complex business environment with a successful track record working directly with senior level management preferred.
• At least 1 year of experience in one or more of the following domains: Access Control, Telecom and Network Security, Cybersecurity Governance, Risk Management, Software Development Security, Cryptography, Security Architecture and Design, Operational Security, Business Continuity & Disaster Recovery, Legal Regulations, Investigations and Compliance, Physical (Environmental) Security, IT or Security Audit, IT or Security Compliance preferred.
• Experience with UML Design Tools preferred.
• Experience with alternate management methods using SSH, serial connections, and the command-line interface TMSH preferred.
• Experience in documentation tools such as Visio and Microsoft Office products preferred.
• Experience with Network and VLAN segmentation preferred.
• Experience with technical writing preferred.
• High School Diploma or equivalent required.
• Bachelor’s Degree in a related field or equivalent work experience strongly preferred.

Licenses and Certifications

• Information Security Certifications strongly preferred.