AVP Cybersecurity Governance Job at GM Financial in Arlington

AVP Cyber Governance – GM Financial

Overview

GM Financial invites applications for the AVP Cyber Governance role. This executive position reports directly to the VP Cybersecurity Governance and offers the opportunity to influence enterprise risk posture at the highest levels of leadership.

Responsibilities

• Lead and develop the Vendor Risk, Application Risk, Findings Management, and Cyber Process Automation teams.
• Oversee third‑party cybersecurity risk assessments, risk scoring, evidence reviews, and remediation workflows.
• Manage application risk assessments ensuring accurate control evaluation and response.
• Direct the full lifecycle of cybersecurity findings – documentation, tracking, aging, remediation, validation, and reporting.
• Guide the Cyber Process Automation team in building scalable workflows, dashboards, and data integrations to improve efficiency.
• Maintain and enhance cybersecurity procedures aligned with NIST CSF and NIST 800‑53.
• Deliver executive‑ready reporting on risk posture, findings, and program performance.
• Serve as a trusted advisor, translating cybersecurity risk into actionable, business‑aligned recommendations.

Reporting Structure

• Reports to VP Cybersecurity Governance

Qualifications

• Proven leadership experience within cybersecurity governance, risk, or assurance functions.
• Strong understanding of NIST CSF, NIST 800‑53, vendor security controls, and application security principles.
• Ability to evaluate risk, drive remediation, and influence senior stakeholders.
• Experience leading workflow automation or low‑code development teams.
• Exceptional communication skills with the ability to simplify complexity for executives and business partners.
• Process‑oriented builder who brings structure, discipline, and continuous improvement to programs and teams.

Experience

• High School Diploma or equivalent required.
• Bachelor’s Degree or equivalent experience preferred.
• 6+ years of experience in large and complex business environments, working directly with senior‑level management.
• 5‑7 years in one or more of: Cybersecurity, Information Security, Network Engineering or Operations, Application Development, Access Control, Security Governance, Risk Management, Software Development Security, Cryptography, Security Architecture and Design, Operational Security, Business Continuity & Disaster Recovery, Legal Regulations, Investigations & Compliance, Physical (Environmental) Security, IT or Security Audit, IT or Security Compliance.
• Information Security Certifications preferred.

What We Offer

Generous benefits package available on day one: 401(k) matching, bonding leave for new parents (12 weeks, 100% paid), tuition assistance, training, GM employee auto discount, community service pay, and nine company holidays.

Our Culture

Our team defines and shapes our culture—welcoming new ideas, fostering integrity, and creating a sense of community and belonging. We thrive together, not just work.

Compensation

Competitive salary and bonus eligibility; eligible for the company vehicle program.

Work Life Balance

Flexible hybrid work environment, 4 days a week in office.

Seniority Level

• Executive

Employment Type

• Full‑time

Job Function

• Engineering and Information Technology