Sr Enterprise Resilience Analyst

JOB DESCRIPTION

Flexible hybrid work environment, 4 days a week in the office.

Why GM Financial Cybersecurity?

Innovation isn't just a talking point at GM Financial, it's how we operate. By joining our team, you'll work in a mission-focused environment with specialized teams, including Engineering, Threat Intelligence, Vulnerability Management, Incident Response, Firewall, Governance, Risk, Architecture and Offensive Security. These teams collaborate to identify, manage and respond to threats, all while driving innovation across the environment.

Cybersecurity is central to our strategic vision, so you'll benefit from exceptional leadership visibility, with direct reporting lines to the CEO. This structure ensures your work is recognized and supported at the highest levels, while also enabling bold innovation and the adoption of cutting-edge technologies.

Shape the future of Cybersecurity at GM Financial, with the freedom to explore, the tools to build and the support to thrive.

RESPONSIBILITIES

About the role:

The Senior Enterprise Resilience Analyst is responsible for managing a portion of the GM Financial (GMF) Enterprise Resilience Program designed to advise the organization on its management of Resilience risk by supporting risk based management decisions; developing, deploying, monitoring, tuning, evaluating, reporting on and maintaining systems and procedures as part of the migration to a more resilient operating environment. This Team member will contribute and support all areas of ER including but not limited to Policy/Governance, Technology Resilience, Business Resilience, Operational Resilience and Third party resilience. This team member contributes to the technical planning and coordinating of the implementation of supporting infrastructure and applications that adhere to the firms resilience requirements. Additionally, this team member will be responsible to develop strong working relationships and partnerships with internal and external groups to ensure the Enterprise Resilience migration program is operating effectively and efficiently.

In this role you will:

• Develop and update Enterprise Resilience policies, standards and procedures referencing Business Continuity, Technology Recovery and Third-Party Resilience industry frameworks and best practices including implementing revisions in accordance with updates in relevant regulatory or industry resilience practices
• Audit management and tracking of remediation items and/or findings to completion
• Collaborate with business partners to manage resilience needs
• Development of resilience requirements to protect the company from external and internal threats
• Documentation and reporting of policy or procedure discrepancies and/or change requests
• Initiate, facilitate and promote Enterprise Resilience within the organization and monitor adherence to Enterprise Resilience policies, standards and controls
• Advocate for Enterprise Resilience as an essential business requirement and advocate the business need as the foundation for resilient program design
• Ensure effective communication and partnership with all departments at GMF and serve as a liaison of Enterprise Resilience and first point of contact for resilience concerns
• Represent the Enterprise Resilience organization on projects as needed
• Engage with business partners to translate high-level business requirements into enterprise resilience initiatives and programs to achieve the GMF's mission, goals and objectives
• Work closely with business stakeholders and project teams to plan, design and check appropriate levels of resilience governance, resource management and asset management

• Strong knowledge of Business Continuity, Technology Recovery and Third-Party Resilience frameworks and best practices
• Advanced knowledge in Infrastructure design and management
• Working knowledge of management processes such as personnel administration, planning and budgeting
• Demonstrated success in project management and leading collaborative programs
• Knowledge and stay abreast on the latest resilience legislation, regulations, advisories, alerts and vulnerabilities
• Practical experience implementing and supporting Enterprise Resilience requirements of a large, global enterprise environment
• Ability to think strategically and make collaborative decisions
• Ability to apply structured analysis methods to various types of data to establish trends, determine variability and business impact
• Communicates quickly, clearly, concisely, appropriately and intelligently
• Foster open communication, speaks with impact, listens to others, and writes effectively
• Ability to effectively negotiate with vendors on upgrades and acquisitions
• Effective planning, time management, negotiation and delegation skills
• Ensure effective communication and partnership with all departments at GMF and serve as a liaison of Enterprise Resilience and first point of contact for resilience concerns
• Represent the Enterprise Resilience organization on projects as needed
• Engage with business partners to translate high-level business requirements into enterprise resilience initiatives and programs to achieve the GMF's mission, goals and objectives
• Ability to approach problems with an open-mind and create new and innovative ideas and methods
• Experience with technical writing
• Experience in documentation tools such as Visio and Microsoft Office products
• Strong analytical skills
• Creative, Innovative, problem-solving and maximizing your potential to solve problems and improve methods
• Think positively when faced with obstacles, build on others ideas, think logically and intuitively
• Detail oriented
• Understanding of cloud technologies and concepts
• Familiarity with DevOps and Agile development processes

• High School Diploma or equivalent required
• Bachelor's Degree in related field or equivalent work experience strongly preferred
• 4-6 years of experience in large and complex business environments with a successful track record working directly with senior level management required
• 4-6 years of experience in one or more of the following domains: Risk Management, Business Continuity & Disaster Recovery, Legal Regulations, Third-Party Resilience required
• 3 or more years in a technology-focused role supporting operations or security, or program, project, product, or service management preferred

• Professional certification(s) in the field of Information Technology or Disaster Recovery (for example DRCS, CBRITP, CBRM, CBCP, A+, or CISSP) preferred
• Professional certification(s) in public Cloud (Azure, AWS, GCP) preferred