IT Compliance Analyst II - IT Services

JOB DESCRIPTION

Why GM Financial Technology

Innovation isn't just a talking point at GM Financial, it's how we operate. From generative AI and cloud-native technologies to peer-led learning and hackathons, our tech teams are building real solutions that make a difference. We're committed to AI-powered transformation, using advanced machine learning and automation to help us reimagine customer interactions and modernize operations, positioning GM Financial as a leader in digital innovation within a dynamic industry.

Join us and discover a workplace where your ideas matter, your development is prioritized, and you can truly make a global impact.

RESPONSIBILITIES

About this role:

• Personnel to develop and implement processes improvements, changes or new processes
• Provide services to IT personnel in the development of policy, standard and process
• Analyze and interpret audit requests, findings and reports to provide consultation and expert advice on how to formally respond and remediate issues
• Lead compliance projects across various IT areas
• Develop and execute compliance reviews to evaluate the effectiveness of general controls and operating processes, including documentation, presentations and action plan remediation assistance
• Provide consultation and expert advice to management on scope and focus of IT compliance initiatives
• Escalate to management if appropriate and timely responses to audit issues are not received
• Negotiate acceptable timeframes to comply with audit findings by interfacing with auditors, IT management and business personnel
• Identify areas where technology processes need to be established or improved
• Using a formal method for process improvement (Six Sigma, etc.), partner with IT Maintain GMF's IT risks, controls, policies, standards and action plans in the Governance, Risk, and Compliance system (GRC)

• Advanced knowledge of business processes for supported business groups.
• Advanced knowledge of information technology systems, infrastructure and operations.
• Advanced working knowledge of information systems and operations systems for supported business groups.
• Knowledge of security frameworks (e.g., ISO , NIST, FFIEC, etc.).
• Knowledge of security methodologies, policies, standards and best practices.
• Working knowledge of the Corporate Business solution environment.
• Strong in the use of Microsoft Office software including strong ability to analyze data using Excel for reporting and data mining purposes
• Strong people skills including the ability to interact with employees at all levels
• Excellent written and oral communication skills
• Ability to meet expected delivery dates and the tasks necessary to achieve objectives
• Advanced computer skills and conversance in information technology issues
• Deadline oriented
• Must be a self-starter and able to manage the investigations function with minimal supervision
• Provide routine reports to management on compliance projects.

• 5-7 years of audit or technology compliance experience preferred
• High School Diploma or equivalent required
• Bachelor's Degree in related field or equivalent work or military experience preferred
• CISA, CISSP, CIPP or other compliance/technology related certifications preferred
• Six Sigma Green Belt or higher preferred
• Normal office environment subject to stressful situations
• Flexible schedule with possibility of working long hours including weekends/holidays, occasional overtime may be required
• Limited travel may be required to support business needs