Lead Auditor - Cybersecurity Assurance
Hybrid · Detroit, Michigan, United States
Job Summary
Lead Auditor, Cybersecurity Assurance at GM Global Mission Audit Services to spearhead end-to-end cybersecurity assurance engagements across a complex global environment. Plan, execute, and report on reviews evaluating the design and operating effectiveness of cybersecurity and technology controls across domains such as identity and access management, logging and monitoring, vulnerability management, incident response, backup and recovery, and security configuration. Apply a risk-based perspective to identify control gaps and opportunities to improve resilience; review testing workpapers and evidence for alignment with audit standards; develop concise, executive-ready reports with root cause and practical remediation actions; present results to senior leaders and align remediation priorities. Coach and support team members throughout the audit lifecycle; build relationships with stakeholders across cybersecurity, IT, privacy, compliance, and related functions; contribute to continuous improvement of the cybersecurity assurance program; monitor remediation activity and adapt coverage to GM operations. Location: Hybrid in Detroit, MI with up to 5-10% domestic and possible international travel. Required qualifications include a bachelor’s degree in a related field and 5+ years of relevant experience, with strong knowledge of NIST/COBIT/ISO frameworks and multiple cybersecurity domains; excellent written and verbal communication and leadership capabilities.
Required Qualifications
- Bachelor’s degree in Information Systems, Computer Science, Cybersecurity, or related field (or equivalent related experience)
- 5+ years of experience in IT audit, cybersecurity, risk management, or technology assurance
- Strong understanding of cybersecurity and technology risk across complex systems
- Knowledge of internal controls and risk frameworks such as NIST CSF, NIST 800-53, COBIT, ISO 27001
- Experience in IAM, logging and monitoring, vulnerability management, incident response, backup and recovery, security configuration controls
- Ability to communicate risk to non-technical stakeholders and senior leaders
- Ability to work independently, manage multiple priorities, and deliver results in fast-paced environment
- Domestic travel: 5%–10%. International travel: possible
Apply with one swipe on Sorce. We auto-fill applications and apply on your behalf — no cover letters, no 40-minute forms.
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.