Senior Cybersecurity & IT Controls Engineer (Cybersecurity)

Location: Austin, Texas, or Warren, Michigan, United States. Hybrid role requiring the selected candidate to report to a specific location at least 3 times per week. Relocation benefits are available for eligible candidates.

Company

hirify.global is an automotive company focused on developing safer, lower-emission, and more connected transportation solutions.

What you will do

• Design, engineer, implement, assess, and improve cybersecurity and IT controls across applications, infrastructure, cloud platforms, SaaS, identity, and data environments.
• Translate NIST, ISO, CIS, SOX, and other policy requirements into technically feasible controls, guardrails, and reference architectures.
• Develop controls assurance workflows, automation, scripts, data pipelines, dashboards, and integrations across ServiceNow IRM, IAM, logging, vulnerability management, and cloud security platforms.
• Lead end-to-end control assessments, including scoping, evidence evaluation, documentation, stakeholder alignment, reporting, and remediation validation.
• Identify systemic risks such as excessive access, weak segregation of duties, monitoring gaps, and insecure configurations, then recommend sustainable, risk-based improvements.
• Provide executive-ready reporting on control posture, cyber and IT risks, remediation progress, ownership, and accountability.

Requirements

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related field, or equivalent experience.
• At least 5 years of experience in cybersecurity engineering, IT audit, GRC, technology risk, or IT controls assurance.
• Strong understanding of NIST, ISO, CIS, IT General Controls, and regulatory requirements such as SOX, PCI, GDPR, or CCPA.
• Hands-on experience with controls and security capabilities across cloud platforms, SaaS, identity platforms, and modern enterprise environments.
• Experience with controls assurance or GRC tools such as ServiceNow IRM and with evaluating configurations, logs, access data, and automated reports.
• Must be able to work in the United States and report to Austin or Warren at least 3 times per week. GM does not provide immigration-related sponsorship.

Nice to have

• CISA, CISSP, CRISC, CISM, or CCSP certification.
• Experience with AI, scripting, data analytics, dashboarding, continuous monitoring, or evidence automation.
• Experience applying unified controls frameworks in complex global enterprise environments.
• Experience integrating ServiceNow IRM with IAM, vulnerability management, logging, and cloud security platforms.
• Supervisory, coaching, mentoring, or people-leadership experience.

Culture & Benefits

• Hybrid work arrangement with regular on-site collaboration.
• Relocation benefits for candidates who qualify under company policy.
• Employee benefits designed to support well-being at work and at home.
• Focus on inclusion, belonging, and non-discriminatory employment practices.

Hiring process

• Applicants may be required to complete a role-related assessment and pre-employment screening where applicable.