Cybersecurity Team Lead

Why GMF Cybersecurity?

Innovation isn’t just a talking point at GM Financial, it’s how we operate. By joining our team, you’ll work in a mission-focused environment with specialized teams, including Engineering, Threat Intelligence, Vulnerability Management, Incident Response, Firewall, Governance, Risk, Architecture and Offensive Security. These teams collaborate to identify, manage and respond to threats, all while driving innovation across the environment.

Cybersecurity is central to our strategic vision, so you’ll benefit from exceptional leadership visibility, with direct reporting lines to the CEO. This structure ensures your work is recognized and supported at the highest levels, while also enabling bold innovation and the adoption of cutting-edge technologies.

Shape the future of Cybersecurity at GM Financial, with the freedom to explore, the tools to build and the support to thrive.

This position will be posted until filled.

The Cybersecurity organization is hiring two Team Leads to support critical governance functions. While both positions provide people leadership, operational oversight, and stakeholder engagement, each role supports a distinct area of focus. Candidates will be considered for one or both opportunities based on their experience and interests.

Job Description - Tiger Team

The Cybersecurity Team Lead is responsible for leading and coordinating a cross-functional Tiger Team focused on high-priority cybersecurity efforts, driving remediation activities, and executing strategic initiatives. This role provides day-to-day leadership and execution oversight to ensure timely delivery of high-quality outcomes aligned with organizational objectives. The Team Lead drives collaboration among subject-matter experts across Cybersecurity, removes roadblocks, and advances initiatives that strengthen cybersecurity governance, operational effectiveness, and risk management. Additionally, this role provides people leadership and operational oversight to support team performance, employee development, and continuous improvement.

Job Description – Issues Management

The Cybersecurity Team Lead is responsible for leading a team that administers cybersecurity governance processes, including Issues Management, Risk Exception Management, and related remediation activities. The role is accountable for work prioritization, process execution, stakeholder engagement, escalations, reporting, and governance activities that support effective cybersecurity risk management across the organization. Additionally, this role provides people leadership and operational oversight to support team performance, employee development, and achievement of organizational objectives.

Responsibilities

• Lead a team of cybersecurity professionals responsible for supporting high-priority efforts, remediation activities, and strategic initiatives.

• Establish priorities, assign work, and monitor progress to ensure initiatives are delivered on time and aligned with organizational objectives.

• Provide day-to-day leadership, coaching, and performance management to team members, fostering professional growth and accountability.

• Coordinate cross-functional activities among cybersecurity, technology, and business stakeholders to drive successful outcomes.

• Track and communicate initiative status, risks, dependencies, and key decisions to leadership and stakeholders.

• Remove obstacles and facilitate issue resolution to maintain momentum and execution effectiveness.

• Review team deliverables, analyses, recommendations, documentation, and governance artifacts to ensure quality, accuracy, and completeness.

• Partner with teams across Cybersecurity Governance and Operations to support process improvement efforts, reinforce standards, and maintain alignment with cybersecurity expectations.

• Build strong working relationships across Cybersecurity and the broader organization to foster collaboration and influence positive outcomes.

• Contribute to the continuous improvement of cybersecurity governance and operations

What makes you an ideal candidate?

• Demonstrated leadership and people management skills, including supervising, delegation, coaching, mentoring, performance management, and employee development.

• Knowledge of cybersecurity governance, risk, compliance, and operational security practices and industry frameworks such as NIST and ISO 27001.

• High-level understanding of technology infrastructure, cybersecurity concepts, security platforms, and applicable regulatory requirements.

• Ability to lead structured initiatives from planning through execution, managing priorities, dependencies, risks, and stakeholder expectations.

• Strong analytical and problem-solving skills, with the ability to assess risk, identify trends, and develop practical solutions.

• Ability to think strategically while effectively managing day-to-day operational activities.

• Excellent verbal, written, presentation, and stakeholder management skills, including the ability to influence outcomes and build consensus across teams.

• Strong organizational, planning, delegation, and time management skills with a focus on accountability and results.
  

Experience and Education

• 5-7 years of experience in large and complex business environments with a successful track record working directly with senior level management with at least 3 years of experience in one or more of the following domains: Cybersecurity, Information Security, Network Engineering or Operations, Information Technology, Application Development, Access Control, Security Governance, Risk Management, Software Development Security, Cryptography, Security Architecture and Design, Operational Security, Business Continuity & Disaster Recovery, Legal Regulations, Investigations and Compliance, Physical (Environmental) Security, IT or Security Audit, IT or Security Compliance preferred

• 2-3 years of experience securing cloud deployments on common platforms like Microsoft Azure, Amazon Web Services or Google Cloud Platform preferred

• Experience with deploying environments by defining infrastructure as code (IaC) preferred

• Experience with declarative IaC approaches and immutable infrastructure preferred

• Experience with securing container deployments, Kubernetes, managed Kubernetes PaaS services, Agile environments and DevOps environments preferred

• Experience with managing infrastructure through CI/CD pipelines preferred

• Experience in documentation tools such as Visio and Microsoft Office products preferred

• Experience with alternate management methods using SSH, serial connections and the command-line interface TMSH preferred

• High School Diploma or equivalent required

• Bachelor’s Degree in related field or equivalent work experience strongly preferred