AVP Enterprise Resilience

JOB DESCRIPTION

Why GMF Cybersecurity?

Innovation isn't just a talking point at GM Financial, it's how we operate. By joining our team, you'll work in a mission-focused environment with specialized teams, including Engineering, Threat Intelligence, Vulnerability Management, Incident Response, Firewall, Governance, Risk, Architecture and Offensive Security. These teams collaborate to identify, manage and respond to threats, all while driving innovation across the environment.

Cybersecurity is central to our strategic vision, so you'll benefit from exceptional leadership visibility, with direct reporting lines to the CEO. This structure ensures your work is recognized and supported at the highest levels, while also enabling bold innovation and the adoption of cutting-edge technologies.

Shape the future of Cybersecurity at GM Financial, with the freedom to explore, the tools to build and the support to thrive.

RESPONSIBILITIES

About the Role:

The AVP Enterprise Resilience is responsible for managing a portion of the GM Financial (GMF) Enterprise Resilience (ER) Program designed to advise the organization on its management of Resilience risk by supporting risk based management decisions; developing, deploying, monitoring, tuning, evaluating, reporting on and maintaining systems and procedures as part of the migration to a more resilient operating environment. This team member is responsible for leading both technical planning and coordinating the implementation of supporting infrastructure and applications that adhere to the firms resilience requirements.

This Team member will have responsibility to lead all areas of ER including but not limited to Policy/Governance, Technology Resilience, Business Resilience, Operational Resilience and Third party resilience. Additionally, this team member will be responsible to develop strong working relationships and partnerships with internal and external groups to ensure the Enterprise Resilience migration program is operating effectively and efficiently.

In this role, you will:

• Leads Enterprise Resilience group and is responsible for talent management
• Coordinate with Senior Enterprise Resilience leaders to set direction and operation of the group
• Prepares roadmaps, guidelines and direction for the department
• Preparing technical requirements and standards
• Manage project assignment and delegate tasks as needed
• Provide conflict resolution and disciplinary actions for the department
• Communicate critical issues and remediation efforts for the Enterprise Resilience program implementation
• Creation, analyze and communicate of Program Implementation metrics to senior leadership
• Participate in emergency response team activities for responding to various service disruptions
• Prepare and update information procedures, standards and/or other technical requirement documents
• Act as a technical resource to department management and others within the company who are seeking more information about Enterprise Resilience
• Participate in periodic Enterprise Resilience program risk assessments
• Define Enterprise Resilience requirements for all projects and company wide initiatives including communication of project information to leadership level stakeholders
• Delegate responsibilities to staff when appropriate
• Mentor and develop staff within the Enterprise Resilience organization, perform evaluations of staff, as well as take corrective actions when necessary
• Oversee the recruitment and career development for the Enterprise Resilience staff
• Perform annual salary evaluations of the Enterprise Resilience staff

• Detail oriented
• Advanced knowledge of Business Continuity, Technology, Third-Party and Enterprise resilience frameworks
• Advanced knowledge in infrastructure design and management
• Working knowledge of management processes such as personnel administration, planning and budgeting
• Advanced understanding of IT Service Management (ITSM) best practices and processes
• Advanced presentation expertise, and the ability to coordinate and conduct meetings
• Demonstrated success in project management
• Knowledge and stay abreast on the latest Resilience legislation, regulations, advisories, alerts and vulnerabilities
• Must have demonstrable experience implementing and supporting Enterprise Resilience requirements of a large, global enterprise environment
• Ability to think strategically and make collaborative decisions
• Ability to apply structured analysis methods to various types of data to establish trends, determine variability and business impact
• Communicates quickly, clearly, concisely, appropriately and intelligently
• Foster open communication, speaks with impact, listens to others and writes effectively
• Ability to effectively negotiate with vendors on upgrades and acquisitions
• Effective planning, time management, negotiation and delegation skills
• Ability to approach problems with an open-mind and create new and innovative ideas and methods
• Advanced technical writing
• Experience in documentation tools such as Visio and Microsoft Office products
• Strong analytical skills
• Ability to approach problems with an open-mind, use existing information and resources
• Creative, innovative, problem-solving and maximizing potential to solve problems and improve methods
• Think positively when faced with obstacles, build on others ideas, think logically and intuitively

• 7+ years of experience in large and complex business environments with a successful track record working directly with senior level management required
• 5+ years of experience in Risk Management, Business Continuity & Disaster Recovery, Third-Party Resilience, Legal Regulations, Program Development and Implementation, Project Management, Resilience Testing, Data Center Management required
• 5-7 years management and/or leadership experience required
• High School Diploma or equivalent required
• Bachelor's Degree in related field or equivalent work experience required
• Master's Degree (or other advanced degree) preferred
• Professional certification(s) in the field of Information Technology or Disaster Recovery (for example DRCS, CBRITP, CBRM, CBCP, A+, or CISSP) preferred
• Normal office environment
• Up to 20% travel required (Domestic and International)