Cybersecurity Architect

GM Financial•Irving, TX

1d•Hybrid

About The Position

The Cybersecurity Architect is responsible for the development and delivery of a comprehensive Cybersecurity program for General Motors Financial (GMF) to assure that information created, acquired, or maintained by GMF is used in accordance with its intended purpose and to protect GMF information, applications, and infrastructure from all threats. Additionally, the program will comply with all statutory and regulatory requirements for information protection, privacy, and cybersecurity.

Requirements

Must have knowledge and stay current on the latest Cybersecurity legislation, regulations, advisories, alerts, and vulnerabilities
In-depth, hands-on understanding in application architecture and technology including web applications, mobile technology, and identity and access management
Strong knowledge of software security, development, and deployment methodologies in web and mobile applications
Possesses knowledge in various information security areas, such as: Identity and Access Management, Threat and Vulnerability Management, Information Risk and Governance, IT architecture, Cloud Architecture, Monitoring, Incident Response, and Security Strategy
Applied knowledge in Cloud Cybersecurity areas
Mobile technology
Strong analytical skills
Excellent verbal communication skills
Strong interpersonal skills
Ability to meet time sensitive deadlines required
Ability to work collaboratively and build consensus is essential
Ability to make sound decisions and exercise good judgment pertaining to operating procedures and projects
Ability to manage business and technical relationships with internal and external clients
Possess strong understanding of cloud technologies and concepts
Strong understanding of and experience with deploying environments using infrastructure and security as code, various operating systems, and microservice architecture
Proficiency in scripting and automation in widely used languages such as Python, Go, Ruby, etc.
7-10 years of experience in Information Technology or Cybersecurity as an Architect or Engineer with Security knowledge and skill preferred
2-4 years of experience securing cloud deployments on common platforms like Microsoft Azure, Amazon Web Services, or Google Cloud Platform preferred
Experience with securing container deployments, Kubernetes, managed Kubernetes PaaS services, Agile environments, and DevOps environments preferred
Experience with the financial industry and regulations required
Experience with firewalls, IDS, log management and troubleshoot network devices required
Experience with managing infrastructure through CI/CD pipelines required
High School Diploma or equivalent required
Bachelor’s Degree in Information Technology, Information Security, Information Assurance, Information Management in related field or equivalent work experience required
Certification in one or more Cybersecurity disciplines (CISSP or CISM) or equivalent experience required

Nice To Haves

Familiarity with Cybersecurity hacking tools and techniques preferred
Certifications in Cloud Cybersecurity (e.g., CCSP, CCSK, or cloud provider specific) preferred
AI Skills Preferred: Experience with AI assisted software development or automation
Knowledge of prompting techniques to improve output quality
Awareness of emerging GenAI capabilities and limitations

Responsibilities

Work with IT departments, IT Architects, data custodians, and governance groups to develop and update GMF Cybersecurity controls, requirements, processes, procedures for secure infrastructure and application architecture
Determine security requirements by evaluating business strategies and requirements; researching information security standards; conducting system security, vulnerability analyses, and risk assessments; reviewing architectures and designs; identifying integration issues; and preparing cost estimates
Provide function and business requirements for security solutions, initiatives, and identified areas to improve GMF’s security posture
Recommend and implement changes in security policies and practices in accordance with changes in regulatory or financial services industry cybersecurity practices
Provide input to Engineers and Developers for additional configuration of application firewalls via IT project management and change management
Manage the efforts to conduct Cybersecurity control assessments for systems which store customer or sensitive information whether hosted internally or cloud based
Assess and communicate security risks associated with development practices in place at GMF
Advise and drive the security maturity in all areas
Assist Cybersecurity Management in creating, reviewing, and updating the Cybersecurity Strategy on a periodic basis
Plan security systems by evaluating network and security technologies; developing requirements for local area networks (LANs), wide area networks (WANs), virtual private networks (VPNs), routers, firewalls, and related security and network devices; designs public key infrastructures (PKIs), including use of certification authorities (CAs) and digital signatures as well as hardware and software; adhering to industry standards
Monitor adherence to standards in architecture, application design, development, and testing frameworks
Partner with infrastructure, application, and other stakeholders to ensure deployed solutions minimize security and privacy risks
Act as a mentor providing guidance to all team members on security issues
Collaborate on the development and delivery of an education and training program on Cybersecurity and privacy for employees, contractors, and other authorized users
Initiate, facilitate, and promote activities to create information security awareness within the organization