Cybersecurity Analyst - Metrics and Reporting

Why GM Financial Cybersecurity?

Innovation isn’t just a talking point at GM Financial, it’s how we operate. By joining our team, you’ll work in a mission-focused environment with specialized teams, including Engineering, Threat Intelligence, Vulnerability Management, Incident Response, Firewall, Governance, Risk, Architecture and Offensive Security. These teams collaborate to identify, manage and respond to threats, all while driving innovation across the environment.

Cybersecurity is central to our strategic vision, so you’ll benefit from exceptional leadership visibility, with direct reporting lines to the CEO. This structure ensures your work is recognized and supported at the highest levels, while also enabling bold innovation and the adoption of cutting-edge technologies.

Shape the future of Cybersecurity at GM Financial, with the freedom to explore, the tools to build and the support to thrive.

About the role:

The Cybersecurity Analyst – Metrics & Reporting is responsible for executing a portion of the GM Financial (GMF) Cybersecurity Program designed to advise the organization on its management of Cybersecurity risk by organizing information, enabling risk management decisions and addressing threats to ensure the security of company systems and information assets. The Cybersecurity Analyst – Metrics & Reporting is responsible for contributing to the success of comprehensive security initiatives, work with internal and external groups to ensure the program is operating effectively and efficiently and develop strong partnerships with business partners across the enterprise to ensure company information assets are protected at the appropriate level.

In this role you will: 

• Maintain databases utilized for the reporting of key cybersecurity and business initiatives
• Regularly examine reports and presentations to identify and resolve mistakes
• Communicate the results of data analysis in written and verbal form to Managers and Senior Cybersecurity leaders
Support various functions within the Cybersecurity organization

What makes you a dream candidate? 

• Analytical skills that allow for the development of data-driven reports
• Ability to use SQL and Microsoft Excel to create pivot tables, graphs and charts
• Strong written and verbal communication skills to effectively relate data to coworkers
• Tendency to pay close attention to small details that could impact results
• Local and wide area networking concepts, principles and protocols
• High level understanding of technology infrastructure, security concepts and platforms
• Demonstrated success in project management
• Knowledge and stay abreast on the latest security and privacy legislation, regulations, advisories, alerts and vulnerabilities
• Knowledge of IT security processes and controls as well as IT infrastructure and networking technical knowledge
• Understanding of cloud technologies and concepts
• Ability to apply structured analysis methods to various types of data to establish trends, determine variability and business impact
• Communicates quickly, clearly, concisely, appropriately and intelligently
• Foster open communication, speaks with impact, listens to others and writes effectively
• Ability to effectively negotiate with vendors on upgrades and acquisitions
• Effective planning, time management, negotiation and delegation skills
• Ability to approach problems with an open-mind and create new and innovative ideas and methods
• Information security standards/frameworks (i.e., NIST Cybersecurity Framework, ISO 27001) skills
• Creative, Innovative, problem-solving and maximizing your potential to solve problems and improve methods
• Think positively when faced with obstacles, build on others ideas, think logically and intuitively

Education and Experience:

• High School Diploma or equivalent Required
• Bachelor’s Degree or equivalent experience strongly Preferred
• Minimum of 1-5 years experience in large and complex business environment with a successful track record working directly with senior level management Preferred
• At least 1 year of experience in one or more of the following domains: Access Control, Telecom and Network Security, Cybersecurity Governance, Risk Management, Software Development Security, Cryptography, Security Architecture and Design, Operational Security, Business Continuity & Disaster Recovery, Legal Regulations, Investigations and Compliance, Physical (Environmental) Security, IT or Security Audit, IT or Security Compliance Preferred

Licenses 

• Information Security Certifications strongly preferred

What We Offer: Generous benefits package available on day one to include: 401K matching, bonding leave for new parents (12 weeks, 100% paid), tuition assistance, training, GM employee auto discount, community service pay and nine company holidays.

Our Culture: Our team members define and shape our culture — an environment that welcomes innovative ideas, fosters integrity, and creates a sense of community and belonging. Here we do more than work — we thrive.

Compensation: Competitive pay and bonus eligibility

Work Life Balance: Flexible hybrid work environment, 4-days a week in office