09/24/2026

Associate Cybersecurity Analyst - Bilingual

Job Description

Why GMF Cybersecurity?

Innovation isn’t just a talking point at GM Financial; it’s how we operate. By joining our team, you’ll work in a mission-focused environment with specialized teams, including Engineering, Threat Intelligence, Vulnerability Management, Incident Response, Firewall, Governance, Risk, Architecture and Offensive Security. These teams collaborate to identify, manage and respond to threats, all while driving innovation across the environment.

Cybersecurity is central to our strategic vision, so you’ll benefit from exceptional leadership visibility, with direct reporting lines to the CEO. This structure ensures your work is recognized and supported at the highest levels, while also enabling bold innovation and the adoption of cutting-edge technologies.

Shape the future of Cybersecurity at GM Financial, with the freedom to explore, the tools to build and the support to thrive. 
 

This position will be posted until filled. 

About the role

The Associate Cybersecurity Analyst supports cybersecurity policy governance and regulatory compliance activities across multiple international authorities. This entry-level to early-career role assists in monitoring regulatory developments, conducting research and analysis, maintaining policy documentation, and supporting compliance initiatives. The Associate Cybersecurity Analyst works closely with Cybersecurity, Legal, Compliance, Privacy, Risk Management, Technology, and business stakeholders to help maintain alignment between cybersecurity policies, standards, and applicable regulatory requirements.

This position requires professional fluency in both English and Spanish to support global regulatory monitoring activities, communicate compliance requirements, and collaborate with stakeholders across diverse regions.

In this role you will:

Cybersecurity Policy Governance

  • Support cybersecurity policy governance activities to help maintain alignment with regulatory requirements, legal obligations, organizational objectives, and industry frameworks.

  • Assist with the full policy lifecycle, including development, review, approval, publication, communication, implementation, and periodic recertification. 

  • Coordinate policy reviews and stakeholder engagement across Cybersecurity, Legal, Compliance, Privacy, Risk Management, Technology, and business teams. 

  • Maintain policy governance documentation, repositories, implementation trackers, compliance evidence, milestones, action items, and remediation activities. 

  • Participate in governance meetings, working groups, and review sessions; document outcomes, track follow-up actions, and support implementation efforts. 

  • Prepare policy governance metrics, compliance summaries, management reports, and other governance-related communications. 

  • Provide guidance on policy requirements and implementation expectations to support organizational compliance.
     

Regulatory Monitoring and Analysis

  • Research, monitor, and analyze cybersecurity regulations, regulatory guidance, compliance requirements, and industry standards.

  • Assist in translating regulatory requirements into cybersecurity policies, standards, procedures, controls, and implementation plans.

  • Support regulatory impact assessments, gap analyses, compliance initiatives, and remediation activities across applicable regulatory authorities.

  • Coordinate stakeholder engagement, evidence collection, and implementation activities related to regulatory compliance efforts.

  • Track regulatory implementation progress, including risks, dependencies, issues, corrective actions, and compliance outcomes.

  • Prepare regulatory updates, executive summaries, compliance metrics, and implementation status reports for leadership and stakeholders.

  • Partner with Legal, Compliance, Privacy, Risk Management, Technology, and business teams to support regulatory interpretation and implementation.

  • Identify opportunities to improve regulatory monitoring, reporting, and compliance processes through standardization, automation, and operational efficiencies.


Apply Now