Sr Enterprise Resilience Analyst - Operational Resilience

JOB DESCRIPTION

Why GM Financial Cybersecurity?

Innovation isn't just a talking point at GM Financial, it's how we operate. By joining our team, you'll work in a mission-focused environment with specialized teams, including Engineering, Threat Intelligence, Vulnerability Management, Incident Response, Firewall, Governance, Risk, Architecture and Offensive Security. These teams collaborate to identify, manage and respond to threats, all while driving innovation across the environment.

Cybersecurity is central to our strategic vision, so you'll benefit from exceptional leadership visibility, with direct reporting lines to the CEO. This structure ensures your work is recognized and supported at the highest levels, while also enabling bold innovation and the adoption of cutting-edge technologies.

Shape the future of Cybersecurity at GM Financial, with the freedom to explore, the tools to build and the support to thrive.

This position will remain posted until filled.

RESPONSIBILITIES

About the role:
The Senior Enterprise Resilience Analyst is responsible for managing a portion of the GM Financial (GMF) Enterprise Resilience Program designed to advise the organization on its management of Resilience risk by supporting risk based management decisions; developing, deploying, monitoring, tuning, evaluating, reporting on and maintaining systems and procedures as part of the migration to a more resilient operating environment. This Team member will contribute and support all areas of ER including but not limited to Operational Resilience and Third-party resilience, Policy/Governance, Technology Resilience, Business Resilience. This team member contributes to the technical planning and coordination of the implementation of supporting infrastructure and applications that adhere to the firm's resilience requirements. Additionally, this team member will be responsible for developing strong working relationships and partnerships with internal and external groups to ensure the Enterprise Resilience migration program is operating effectively and efficiently.

In this role you will:

• Develop and update Third-Party Resilience industry frameworks and best practices including implementing revisions in accordance with updates in relevant regulatory or industry resilience practices
• Initiate, facilitate and promote Enterprise Resilience within the organization and monitor adherence to Enterprise Resilience policies, standards and controls
• Partner with business units to assess resilience needs and establish requirements that safeguard the organization against internal and external threats
• Advocate for Enterprise Resilience as an essential business requirement and advocate business needs as the foundation for resilient program design
• Serve as the primary point of contact for resilience concerns and maintain effective communication across all departments
• Represent Enterprise Resilience in projects, effectively translating business objectives into resilience initiatives and governance practices

• Strong knowledge of and Third-Party Resilience frameworks and best practices
• Ability to stay current on resilience-related legislation, regulations, and emerging vulnerabilities
• Proven success in managing complex projects and driving cross-functional resilience initiatives
• Strong capability to apply structured analysis, interpret data trends, and develop innovative solutions
• Exceptional ability to communicate clearly, foster collaboration, and advocate resilience as a business imperative
• Skilled in negotiating upgrades, acquisitions, and managing external partnerships effectively
• Demonstrated ability to think strategically, approach challenges creatively, and implement forward-thinking methods

• 4-6 years of experience in large and complex business environments with a successful track record working directly with senior level management required
• 4-6 years of experience in one or more of the following domains: Risk Management, Business Continuity & Disaster Recovery, Legal Regulations, Third-Party Resilience required
• 3 or more years in a technology-focused role supporting operations or security, or program, project, product, or service management preferred
• High School Diploma or equivalent required
• Bachelor's Degree in related field or equivalent work experience strongly preferred

• Professional certification(s) in the field of Information Technology or Disaster Recovery (for example DRCS, CBRITP, CBRM, CBCP, A+, or CISSP) preferred
• Professional certification(s) in public Cloud (Azure, AWS, GCP) preferred