Associate Enterprise Resilience Analyst

JOB DESCRIPTION

*Opportunity to work in a hybrid model: Potential to work 4 days onsite and 1 day remote

Why GM Financial Cybersecurity?

Innovation isn't just a talking point at GM Financial, it's how we operate. By joining our team, you'll work in a mission-focused environment with specialized teams, including Engineering, Threat Intelligence, Vulnerability Management, Incident Response, Firewall, Governance, Risk, Architecture and Offensive Security. These teams collaborate to identify, manage and respond to threats, all while driving innovation across the environment.

Cybersecurity is central to our strategic vision, so you'll benefit from exceptional leadership visibility, with direct reporting lines to the CEO. This structure ensures your work is recognized and supported at the highest levels, while also enabling bold innovation and the adoption of cutting-edge technologies.

Shape the future of Cybersecurity at GM Financial, with the freedom to explore, the tools to build and the support to thrive.

• Develop and update Enterprise Resilience policies, standards and procedures referencing Business Continuity, Technology Recovery and Third-Party Resilience industry frameworks and best practices including implementing revisions in accordance with updates in relevant regulatory or industry resilience practices
• Audit management and tracking of remediation items and/or findings to completion
• Collaborate with business partners to manage resilience needs
• Development of resilience requirements to protect the company from external and internal threats
• Documentation and reporting of policy or procedure discrepancies and/or change requests
• Initiate, facilitate and promote Enterprise Resilience within the organization and monitor adherence to Enterprise Resilience policies, standards and controls
• Advocate for Enterprise Resilience as an essential business requirement and advocate the business need as the foundation for resilient program design
• Ensure effective communication and partnership with all departments at GMF and serve as a liaison of Enterprise Resilience and first point of contact for resilience concerns
• Represent the Enterprise Resilience organization on projects as needed
• Engage with business partners to translate high-level business requirements into enterprise resilience initiatives and programs to achieve the GMF's mission, goals and objectives
• Work closely with business stakeholders and project teams to plan, design and check appropriate levels of resilience governance, resource management and asset management

• Must have a high level understanding of financial services industry, business and technology resilience and risk
• Must have current knowledge and stay up-to-date on the latest resilience related legislation, regulations, advisories, alerts and vulnerabilities
• Must have knowledge of Business Continuity and Technology Recovery frameworks and industry best practices
• Proficiency with MS-Office applications including Word, PowerPoint, Excel, Visio and Project
• Understanding of cloud technologies and concepts
• Familiarity with DevOps and Agile development processAbility to initiate, facilitate and promote Enterprise Resilience within the organization and monitor adherence to
• Enterprise Resilience policies, standards and controls
• Ability to clearly explain and articulate technical concepts using non-technical language
• Strong analytical skills
• Excellent verbal communication skills
• Strong interpersonal skills
• Ability to meet time sensitive deadlines required
• Ability to work collaboratively and build consensus is essential
• Ability to make sound decisions and exercise good judgment
• Ability to manage business and technical relationships with internal and external clients

• High school diploma required
• Bachelor's degree preferred
• 0-2 years of experience in large and complex business environments with a successful track record working directly with senior level management with working knowledge in one or more of the following domains: Risk Management, Business Continuity & Disaster Recovery, Legal Regulations Pref
• 0-2 years of experience in the financial services industry Pref
• 0-2 years of demonstrable experience leading collaborative programs and projects with senior level management Req

• Professional certification(s) in the field of
  Information Technology or Disaster Recovery (for example DRCS, CBRITP, CBRM, CBCP, A+, or CISSP) Pref