Enterprise Resilience Analyst

JOB DESCRIPTION

Flexible hybrid work environment, 4 days a week in the office.

Why GM Financial Cybersecurity?

Innovation isn't just a talking point at GM Financial, it's how we operate. By joining our team, you'll work in a mission-focused environment with specialized teams, including Engineering, Threat Intelligence, Vulnerability Management, Incident Response, Firewall, Governance, Risk, Architecture and Offensive Security. These teams collaborate to identify, manage and respond to threats, all while driving innovation across the environment.

Cybersecurity is central to our strategic vision, so you'll benefit from exceptional leadership visibility, with direct reporting lines to the CEO. This structure ensures your work is recognized and supported at the highest levels, while also enabling bold innovation and the adoption of cutting-edge technologies.

Shape the future of Cybersecurity at GM Financial, with the freedom to explore, the tools to build and the support to thrive.

RESPONSIBILITIES

About the role:

The Enterprise Resilience Analyst is responsible for executing a portion of the GM Financial (GMF) Enterprise Resilience Program designed to advise the organization on its management of resilience risk by organizing information, enabling risk management decisions and addressing threats to ensure the resilience of all aspects of company operations. This Team member will contribute and support all areas of ER including but not limited to Policy/Governance, Technology Resilience, Business Resilience, Operational Resilience and third party resilience. The Enterprise Resilience Analyst is responsible for contributing to the success of comprehensive resilience initiatives, work with internal and external groups to ensure the program is operating effectively and efficiently and develop strong partnerships with business partners across the enterprise to ensure the resilience of all aspects of the company operations.

In this role you will:

• Develop and update Enterprise Resilience policies, standards and procedures referencing Business Continuity, Technology Recovery and Third-Party Resilience industry frameworks and best practices including implementing revisions in accordance with updates in relevant regulatory or industry resilience practices
• Audit management and tracking of remediation items and/or findings to completion
• Collaborate with business partners to manage resilience needs
• Development of resilience requirements to protect the company from external and internal threats
• Documentation and reporting of policy or procedure discrepancies and/or change requests
• Initiate, facilitate and promote Enterprise Resilience within the organization and monitor adherence to Enterprise Resilience policies, standards and controls
• Advocate for Enterprise Resilience as an essential business requirement and advocate the business need as the foundation for resilient program design
• Ensure effective communication and partnership with all departments at GMF and serve as a liaison of Enterprise Resilience and first point of contact for resilience concerns
• Represent the Enterprise Resilience organization on projects as needed
• Engage with business partners to translate high-level business requirements into enterprise resilience initiatives and programs to achieve the GMF's mission, goals and objectives
• Work closely with business stakeholders and project teams to plan, design and check appropriate levels of resilience governance, resource management and asset management

• High School Diploma or equivalent required
• Bachelor's Degree in related field or equivalent work experience strongly preferred
• 2-4 years experience in large and complex business environment with a successful track record working directly with senior level management preferred
• 2-4 years of experience in one or more of the following domains: Risk Management, Business preferred
• 2-4 years of experience in one or more of the following domains: Risk Management, Business preferred
• Continuity & Disaster Recovery, Legal Regulations, Investigations and Compliance, Incident Management preferred

• Professional certification(s) in the field of Information Technology or Disaster Recovery (for example DRCS, CBRITP, CBRM, CBCP, A+, or CISSP) preferred