Sr. It Auditor - Cybersecurity Assurance

The Sr. IT Auditor (Cybersecurity Assurance) is responsible for demonstrating skills in assessing IT process and technology risks, identifying, and evaluating the design of IT controls, designing, executing and documenting IT audit tests, and making initial determination of reportable issues. During the audit process, completes work timely and in accordance with GMAS Audit Methodology (Agile), Institute of Internal Auditors (IIA) and other applicable standards, and defined plans, budgets, and schedules.

• Develop understanding of appropriate business aspects, cyber risks, IT control requirements, processes, and systems under review.
• Perform process and technology risk analyses, prepare process maps and flowcharts, and prepare effective and efficient compliance and substantive technical test plans; and execute in depth IT audit tests.
• Prepare work papers, draft grammatically correct issue letters and other documents; assist in preparation of the draft audit report.
• Perform related work as assigned by lead auditor(s) and/or Manager.
• Evaluate test results: accurately identify symptoms, root cause, problems, identify alternative controls and develop recommendations.
• Perform assessment of IT process and security controls within information systems environment.
• Elevate issues/concerns as necessary within GMAS.
• Evaluate the completeness of the auditee's corrective action plans.

Required Qualifications

• Familiarity with Secure Software Development practices
• Detailed knowledge of communications protocols, such as Bluetooth, Wi-Fi, CDMA, GSM, TCP/IP, Ethernet, etc.
• Familiarity with various operating system platforms (UNIX/Linux, Windows) and security best practices for each
• Strong understanding of networking concepts such as routing, switching, access control lists, IDS/IPS, and firewalls.
• Bachelor’s Degree in Information Technology, Computer Science, or related field preferred but not required.
• Three years or more of professional experience or job related experience in IT Audit, Information Security, or Information Technology
• Extensive knowledge and skill of IT analysis which includes expertise in analyzing confidentiality, integrity, availability (CIA) of complex IT systems.
• Expertise in Internal Controls concepts and practices, such as NIST, CoBIT, ITIL.
• Knowledge and understanding of industry standards and best practices as it relates to cyber risk, authentication, encryption and secure communications.
• Effective oral and written communication skills.

Desired Skills

• Experience with various programming or scripting languages
• Graduate Degree in Information Technology, Computer Science, or related field
• Strong interpersonal skills and demonstrable leadership ability
• Ability to work independently
• Experience in Embedded Device programming and security, penetration testing and / or fuzz testing
• Agrees to pursue professional development opportunities and to obtain professional certification if not already certified
• Domestic travel - minimal; international travel possible
• Strong analytical and problem - solving ability
• Professional certification (CEH, Network +, CISA, CISM, CISSP or other certifications)

Compensation: The expected base compensation for this role is : $80,982 - $130,559 . Actual base compensation within the identified range will vary based on factors relevant to the position.

Bonus Potential: An incentive pay program offers payouts based on company performance, job level, and individual performance.

Benefits: GM offers a variety of health and wellbeing benefit programs. Benefit options include medical, dental, vision, Health Savings Account, Flexible Spending Accounts, retirement savings plan, sickness and accident benefits, life insurance, paid vacation & holidays.

About GM

Our vision is a world with Zero Crashes, Zero Emissions and Zero Congestion and we embrace the responsibility to lead the change that will make our world better, safer and more equitable for all.

Why Join Us

We aspire to be the most inclusive company in the world. We believe we all must make a choice every day – individually and collectively – to drive meaningful change through our words, our deeds and our culture. Our Work Appropriately philosophy supports our foundation of inclusion and provides employees the flexibility to work where they can have the greatest impact on achieving our goals, dependent on role needs. Every day, we want every employee, no matter their background, ethnicity, preferences, or location, to feel they belong to one General Motors team.

Benefits Overview

Diversity Information

General Motors is committed to being a workplace that is not only free of discrimination, but one that genuinely fosters inclusion and belonging. We strongly believe that workforce diversity creates an environment in which our employees can thrive and develop better products for our customers. We understand and embrace the variety through which people gain experiences whether through professional, personal, educational, or volunteer opportunities. GM is proud to be an equal opportunity employer.

Equal Employment Opportunity Statements

GM is an equal opportunity employer and complies with all applicable federal, state, and local fair employment practices laws. GM is committed to providing a work environment free from unlawful discrimination and advancing equal employment opportunities for all qualified individuals. As part of this commitment, all practices and decisions relating to terms and conditions of employment, including, but not limited to, recruiting, hiring, training, promotion, discipline, compensation, benefits, and termination of employment are made without regard to an individ ual's protected characteristics. For purposes of this policy, “protected characteristics" include an individual's actual or perceived race, color, creed, religion, national origin, ancestry, citizenship status, age, sex or gender (including pregnancy, childbirth, lactation and related medical conditions), gender identity or gender expression, sexual orientation, weight, height, marital status, military service and veteran status, physical or mental disability, protected medical condition as defined by applicable state or local law, genetic information, or any other characteristic protected by applicable federal, state or local laws and ordinances. If you need a reasonable accommodation to assist with your job search or application for employment, email us at [email protected] or call us at 800-865-7580. In your email, please include a description of the specific accommodation you are requesting as well as the job title and requisition number of the position for which you are applying.