Bilingual Cybersecurity Policy & Regulatory Analyst

Why GM Financial Cybersecurity?
Innovation isn’t just a talking point at GM Financial, it’s how we operate. By joining our team, you’ll work in a mission-focused environment with specialized teams, including Engineering, Threat Intelligence, Vulnerability Management, Incident Response, Firewall, Governance, Risk, Architecture and Offensive Security. These teams collaborate to identify, manage and respond to threats, all while driving innovation across the environment.

Job Description

Why GM Financial Cybersecurity?
Innovation isn’t just a talking point at GM Financial, it’s how we operate. By joining our team, you’ll work in a mission-focused environment with specialized teams, including Engineering, Threat Intelligence, Vulnerability Management, Incident Response, Firewall, Governance, Risk, Architecture and Offensive Security. These teams collaborate to identify, manage and respond to threats, all while driving innovation across the environment.

Cybersecurity is central to our strategic vision, so you’ll benefit from exceptional leadership visibility, with direct reporting lines to the CEO. This structure ensures your work is recognized and supported at the highest levels, while also enabling bold innovation and the adoption of cutting-edge technologies.

Shape the future of Cybersecurity at GM Financial, with the freedom to explore, the tools to build and the support to thrive.

Responsibilities

About the role
The Bilingual Cybersecurity Policy and Regulatory Analyst is responsible for monitoring, analyzing, and supporting cybersecurity regulatory requirements across multiple international jurisdictions. This position will help ensure alignment with applicable laws, regulations, industry standards, organizational governance objectives, and policies. This role requires fluency in English and Spanish to support global compliance initiatives, communicate regulatory impacts, manage cross-functional projects, and collaborate with stakeholders across regions.

The position combines regulatory analysis, cybersecurity knowledge, policy governance, technical acumen, and project management expertise to assess the impact of evolving requirements on security controls, technologies, and operational processes. The analyst leads and coordinates regulatory and policy initiatives, manages implementation activities and deliverables, facilitates stakeholder engagement, and supports compliance readiness, audit preparedness, and continuous process improvement across multiple jurisdictions.

In This Role You Will

Regulatory Monitoring and Analysis

• Research, monitor, analyze, and interpret cybersecurity regulations, regulatory guidance, compliance requirements, and industry standards, translating requirements into actionable policies, standards, procedures, controls, and implementation recommendations.
• Manage and coordinate regulatory impact assessments, gap analyses, and remediation activities to evaluate compliance obligations and implementation requirements across multiple jurisdictions.
• Lead and support regulatory compliance initiatives by coordinating implementation activities, stakeholder engagement, deliverables and evidence collection.
• Interpret and communicate business, operational, and compliance impacts of new, proposed, and evolving cybersecurity regulations.
• Track regulatory implementation risks, issues, dependencies, and corrective actions to support successful execution of compliance initiatives.
• Prepare regulatory readiness reports, executive briefings, implementation updates, and compliance metrics for leadership and key stakeholders.
• Collaborate with Legal, Compliance, Risk Management, Privacy, Technology, and business stakeholders to support the interpretation and implementation of regulatory requirements.
• Identify opportunities to improve regulatory compliance processes and implementation efficiencies through standardization, automation, and continuous improvement.

Cybersecurity Policy Governance

• Lead and coordinate cybersecurity policy governance initiatives to ensure alignment with regulatory requirements, legal obligations, organizational objectives, and industry frameworks.
• Manage the cybersecurity policy…