Job DescriptionWork ArrangementThis role is categorized as hybrid. This means the successful candidate is expected to report to GM Global Technical Center in Warren, Michigan three times per week, at minimum.The RoleThe Ecosystem Cybersecurity Architect brings together complex and converging across General Motors and third-party ecosystems to secure technologies. Through a holistic view of cybersecurity of customer-facing products and services to surface interconnected risks, illuminate digital dependencies, and define roles and responsibilities. Through broad cross-functional ability to execute global cybersecurity strategy by fostering collaboration, increasing awareness, and enhancing engagement.Together our partners and Cybersecurity Risk Management team seek opportunities to assess tasks, plan, and execute on time. Our role is pivotal in the enterprise practices around cybersecurity with exposure to senior leaders around the organization. Driving the corporate and industry facing GM Cybersecurity strategy and leadership to encompass our customers, products, and assets.What You’ll Do (Responsibilities)Analyze & AlignExecute the end-to-end evaluation of products, services, and solutions that align with business and customer needsPioneer the assessment and understanding of risks, threats, and exploits at an ecosystem level to enable risk-informed decisionsExamine new and existing product, systems, and interfaces to decide the efficacy of cybersecurity programsDrive ecosystem threat modeling, risk assessment, and penetration testing and advise on proper mitigationsUnderstand where data interdependencies live across the ecosystemLead & EnrichSpearhead GM’s cybersecurity center of excellence and devise a holistic cybersecurity strategyDevelop an ecosystem methodology that considers customer needs, business advancements, and external requirementsEnable sustainable GM Value Streams, to promote secure practices and advocate for a cybersecurity-by-design cultureBroaden cybersecurity risk management and advise business, technology, and cybersecurity stakeholders and executive leadershipGovern & GuideResearch emerging technologies and methodologies to increase GM’s ability to mitigate unconventional threat vectorsEngage with third-parties, partners, and industry to evolve domain-focused security solutionsMonitor changes in technology, the industry, and regulatory landscapes to keep GM Cybersecurity aware of emerging threats and risksEstablish ecosystem cybersecurity metrics and define Key Performance Indicators, standards, processes, and proceduresDevelop & CoachGuidelines, standards, patterns, cybersecurity principles, findings and lessons learnedProduct/Service-focused ecosystem architecture models (relational, interaction diagrams) includingEnd-to-end information flowRisks, attack paths, and mitigationsPrivacy, standards, and regulatory complianceSkills, capabilities, and technologiesEcosystem security models and roadmapsInventories, asset registers, ownership, roles and responsibilitiesAdditional Job DescriptionYour Skills & Abilities (Required Qualifications)Bachelor’s Degree or equivalent work experience (10 years+) in cybersecurity with a focus on security architecture, identity & access management and solutions architecture in large, complex technical environmentsTechnical ExperienceDemonstrable experience designing or managing a corporate cybersecurity and compliance program(s)Experience with on-premises, hosted, and cloud services supporting products and services requiring a converged approachExtensive knowledge in security principles, such as encryption/key management, network design, access control and incident containmentFamiliar with information, embedded, and operational technology disciplines, intersections, and security solutionsThorough understanding of security principles, such as encryption/key management, network design, access control and incident containmentKnowledge of the regulatory landscape and intricacies related to industry cybersecurity standards and best practices (examples include: NIST CSF, SSDF, NIST 800-53, ISO 270001/2, ISO/IEC 15.x.x, NHTSA Best Practices, ISO/SAE 21434, SOC2, etc) and state privacy lawsIndustry certifications, such as Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), GIAC Security Essentials (GSEC), Certified Information Security Manager (CISM), or other.Experience with policy/standard creation and acceptanceInterpersonal ExperienceExcellent communication and collaboration skills, including the ability to lead without authority, resolve cross-team issues, effectively communicate changes, and interact with team members at all levels from the end-user to senior leadershipExhibit creative and analytical thinking to evaluate situations objectively, work independently with minimum direction in a fast-paced environment, and collaborate effectivelySuperb communicator to serve as primary liaison between business and technical teamsA growth mindset and willingness to learn and continuously improveThorough understanding of risk management principles and processesCapable of decisions and recommendations while considering tradeoffs between conflicting objectivesBusiness acumen and management skills; personable, approachable, empathetic; proved managerial courageExhibit leadership in cross-functional teams to develop, implement, and test cross-domain solutionsStrong teamwork, project management, and team-building skills and the potential to direct teams and push projects across various departmentsWhat Will Give You a Competitive Edge (Preferred Qualifications)Experience in more than one domain of cybersecurity (IT, Manufacturing, Product)Proficient in architecture frameworks (TOGAF, Zachman)15 years of overall automotive or technology experienceStrong knowledge and experience of on-premises, hosted, and cloud security; industry cybersecurity standards and best practices listed aboveThis position requires the ability to legally operate a motor vehicle on a regular basis and successfully complete a Motor Vehicle Report review.GM DOES NOT PROVIDE IMMIGRATION-RELATED SPONSORSHIP FOR THIS ROLE. DO NOT APPLY FOR THIS ROLE IF YOU WILL NEED GM IMMIGRATION SPONSORSHIP (e.g., H-1B, TN, STEM OPT, etc) NOW OR IN THE FUTURE.About GMOur vision is a world with Zero Crashes, Zero Emissions and Zero Congestion and we embrace the responsibility to lead the change that will make our world better, safer and more equitable for all.Why Join UsWe aspire to be the most inclusive company in the world. We believe we all must make a choice every day – individually and collectively – to drive meaningful change through our words, our deeds and our culture. Our Work Appropriately philosophy supports our foundation of inclusion and provides employees the flexibility to work where they can have the greatest impact on achieving our goals, dependent on role needs. Every day, we want every employee, no matter their background, ethnicity, preferences, or location, to feel they belong to one General Motors team.Benefits OverviewThe goal of the General Motors total rewards program is to support the health and well-being of you and your family. Our comprehensive compensation plan incudes, the following benefits, in addition to many others:
Paid time off including vacation days, holidays, and parental leave for mothers, fathers and adoptive parents;
Healthcare (including a triple tax advantaged health savings account and wellness incentive), dental, vision and life insurance plans to cover you and your family;
Company and matching contributions to 401K savings plan to help you save for retirement;
Global recognition program for peers and leaders to recognize and be recognized for results and behaviors that reflect our company values;
Tuition assistance and student loan refinancing;
Discount on GM vehicles for you, your family and friends.
Diversity InformationGeneral Motors is committed to being a workplace that is not only free of discrimination, but one that genuinely fosters inclusion and belonging. We strongly believe that workforce diversity creates an environment in which our employees can thrive and develop better products for our customers. We understand and embrace the variety through which people gain experiences whether through professional, personal, educational, or volunteer opportunities. GM is proud to be an equal opportunity employer.We encourage interested candidates to review the key responsibilities and qualifications and apply for any positions that match your skills and capabilities.Equal Employment Opportunity StatementsGM is an equal opportunity employer and complies with all applicable federal, state, and local fair employment practices laws. GM is committed to providing a work environment free from unlawful discrimination and advancing equal employment opportunities for all qualified individuals. As part of this commitment, all practices and decisions relating to terms and conditions of employment, including, but not limited to, recruiting, hiring, training, promotion, discipline, compensation, benefits, and termination of employment are made without regard to an individual's protected characteristics. For purposes of this policy, “protected characteristics" include an individual's actual or perceived race, color, creed, religion, national origin, ancestry, citizenship status, age, sex or gender (including pregnancy, childbirth, lactation and related medical conditions), gender identity or gender expression, sexual orientation, weight, height, marital status, military service and veteran status, physical or mental disability, protected medical condition as defined by applicable state or local law, genetic information, or any other characteristic protected by applicable federal, state or local laws and ordinances. If you need a reasonable accommodation to assist with your job search or application for employment, email us at or call us at 800-865-7580. In your email, please include a description of the specific accommodation you are requesting as well as the job title and requisition number of the position for which you are applying.
