Senior Cybersecurity Incident Coordinator

Hybrid in Warren, MI with the support of a mature cybersecurity incident response organization, this senior role drives end-to-end coordination of complex, high-impact incidents at General Motors. You will establish incident clarity and accountability, translate technical findings into business-relevant risk decisions, and lead clear communication and reporting throughout the full incident lifecycle.

What you will do

• Lead coordination of complex cybersecurity incidents from initial triage through containment, eradication, recovery, and post-incident review.
• Act as the primary coordination point across GM Security Operations, incident handlers, application security, vulnerability management, infrastructure teams, business partners, and leadership.
• Apply approved tactical containment methods for impacted hosts, applications, identities, and other technology assets, balancing business continuity, operational risk, and recovery needs.
• Direct collection, validation, and documentation of victim, asset, application, and business-impact information to enable informed, risk-based decision-making.
• Maintain incident status, action tracking, decision logs, stakeholder communications, and escalation records throughout the response.
• Communicate incident actions, emerging risks, technical findings, root cause analysis, recovery considerations, and residual risk to both technical and non-technical audiences, including senior leadership.
• Identify dependencies, remove response blockers, establish clear ownership, and drive timely execution across multiple teams.
• Ensure response activities follow approved policies, standards, playbooks, service-level expectations, and governance requirements.
• Track, analyze, and report Security Operations incident metrics, including response performance, containment progress, trends, recurring control gaps, and opportunities for improvement.
• Lead or facilitate post-incident reviews to identify systemic weaknesses, lessons learned, corrective actions, and resilience improvements.
• Partner with security and technology leaders to improve incident response processes, playbooks, automation, documentation, and operational readiness.
• Coach and mentor incident coordinators and other team members to reinforce consistent decision-making, communication, and response practices.
• Represent incident response in cross-functional initiatives such as risk discussions, control assessments, exercises, and continuous improvement efforts.
• Develop and deliver executive-level communications covering cybersecurity incidents, business impact, and response actions.
• Develop, enhance, and maintain incident response toolsets to streamline operations and improve effectiveness.
• Operate as a subject-matter leader for cybersecurity incident coordination and response operations.
• Provide concise, actionable reporting that supports enterprise risk decisions and prioritization.
• Support on-call rotation during off hours and holidays.

What you bring

• Strong analytical and critical-thinking skills to evaluate incomplete or conflicting information, set priorities, and communicate defensible conclusions.
• Experience coordinating complex cybersecurity incidents (or other high-impact technology events) across technical and business stakeholders.
• Advanced written and verbal communication skills, including the ability to brief senior leaders and connect technical risk to business implications.
• Proven ability to make timely, sound decisions in high-pressure, ambiguous, rapidly changing situations.
• Strong customer service and relationship-management skills with a track record of building trust across technical teams, business partners, and leadership.
• Ability to work effectively in a highly collaborative, globally distributed team environment.
• Experience coaching, mentoring, or developing others and supporting a culture of operational excellence.
• Ability to manage multiple priorities, maintain attention to detail, and drive accountability across the incident lifecycle.
• Commitment to continuous improvement, process discipline, and effective cybersecurity governance.
• Strong project management skills.

Hybrid / Location expectation

This role is categorized as hybrid. The selected candidate is expected to report to a specific location at least 3 times a week (or other frequency dictated by their manager).

Relocation

Relocation benefits are available for candidates who qualify under company policy.

Immigration sponsorship

GM does not provide immigration-related sponsorship for this role. Do not apply for this role if you will need GM immigration sponsorship now or in the future.