Senior Cybersecurity Engineer - GRC Engineering & Technical Controls

Location: Warren, Michigan, United States; hybrid attendance required at least three times per week. The role is not eligible for relocation benefits.

Company

hirify.global is transforming transportation through connected vehicles, enterprise technology, and cybersecurity initiatives focused on zero crashes, zero emissions, and zero congestion.

What you will do

• Design, build, and maintain API integrations, data pipelines, middleware, and automated evidence-collection workflows connecting GRC platforms with cloud, CMDB, IAM, vulnerability-management, and CI/CD systems.
• Develop policy-as-code guardrails, infrastructure governance checks, continuous control monitoring, configuration-drift detection, and automated control-validation routines.
• Build AI-driven GRC workflows using AI agents, LLM-powered pipelines, workflow orchestration, automated compliance scorecards, and remediation recommendations.
• Translate global, regional, privacy, automotive, vehicle-cybersecurity, and contractual requirements into actionable technical controls and unified control mappings.
• Administer the enterprise GRC/IRM platform, including workflows, relational schemas, API access, control telemetry, and executive dashboards.
• Partner with engineering, compliance, product, and technology teams to validate controls across enterprise, cloud, connected vehicle, and operational technology environments.

Requirements

• Bachelor’s degree in computer science, software engineering, cybersecurity, information systems, or a related technical discipline, or equivalent practical experience.
• At least 7 years of progressive experience in a highly technical security environment focused on GRC engineering, security engineering, IT compliance, or DevSecOps.
• Hands-on programming experience with Python, Go, PowerShell, or Bash, including API integrations, data parsing, and automation.
• Experience or deep conceptual knowledge of AI agents, LLM APIs, workflow orchestration, Git-based workflows, CI/CD, and policy-as-code.
• Practical knowledge of NIST SP 800-53, ISO 27001, SOC 2, cloud infrastructure, IAM, vulnerability management, and containerized deployments.
• At least one active professional certification such as CISSP, CRISC, CISA, or CGRC. GM does not provide immigration-related sponsorship, and the role requires reporting to Warren, Michigan on a hybrid schedule.

Nice to have

• Experience with compliance-as-code, automated controls testing, policy-engine integration, continuous assurance, and production guardrails.
• Experience mapping automotive, vehicle-safety, international privacy, or other specialized regulatory frameworks.
• Advanced customization of GRC/IRM platforms through APIs, database schemas, and workflows.
• Cloud or automation certifications such as CCSP, AWS Certified Security, Azure Security Engineer Associate, or GIAC Cloud Security Automation.

Culture & Benefits

• Full-time employment with hirify.global and access to the company’s total rewards and benefits programs.
• Work within a global enterprise IT and cybersecurity organization focused on safer, more equitable transportation.
• Inclusive workplace with equal employment opportunities and reasonable accommodation support.
• Relocation costs are the responsibility of the selected candidate.

Hiring process

• Applicants may complete role-related assessments and pre-employment screening where applicable.