Information Governance Specialist - Defense Programs

Job Description

Position Overview

The Information Governance Specialist supports GM Defense’s mission by providing day-to-day operational support to information governance leaders and ensuring teams can execute organizational objectives while meeting defense program requirements. This role coordinates CUI handling activities (marking, storage, sharing, and retention), supports OPSEC assessments, and tracks governance actions to closure across stakeholders. The information governance specialist monitors compliance, maintains required documentation and training artifacts, and helps implement practical controls and processes that reduce risk and strengthen the organization’s information governance posture.

Key Responsibilities

• Ensure compliance with Corporate Data Governance policies, CMMC, NIST SP 800‑171, DFARS, FAR, and DoD cybersecurity requirements supporting government contracts.
• Contribute to the development and execution of the Information Governance roadmap aligned with defense acquisition contract requirements.
• Define and implement contract-specific data classification schemes, ownership models, and lifecycle management practices.
• Support development and implementation of Operational Security (OPSEC) plans, Information Lifecyle Management (ILM) and controlled Information handling across the organization.  
• Support visitor management operations for controlled areas (e.g., badging/escorts, visitor approvals, briefings, and access logs) to protect CUI and export controlled information and align with program security requirements.
• Coordinate and document controlled data transfers (internal and external), including export/share approvals, secure transmission methods, receipt confirmation, and retention of transfer records to support audit readiness.
• Maintain and update governance documentation, including incident response plans, audit protocols, and key process documents.
• Collaborate with cross-functional teams to support digital transformation initiatives to improve end user experience.
• Collaborate with stakeholders to ensure supplier compliance with CMMC requirements
• Support risk assessments and audit activities to drive risk mitigation strategies across defense programs.
• Develop and maintain OPSEC and CUI training materials and oversee annual training initiatives.
• Maintain KPIs (training completion, audit findings aging, transfer volumes, open exceptions) and publish dashboards.

Qualifications

Education & Experience

• Bachelor’s in Information Systems, Information Security, Data Management, Cybersecurity
• 5+ years of experience in Information Governance, Industrial Security, Information Security, Risk Management, or audit readiness.
• 2+ years in defense industry roles involving regulatory compliance in aerospace, defense, or similarly regulated industries.
• Familiar with CMMC, NIST SP 800‑171, DFARS, FAR, and DoD cybersecurity requirements supporting government contracts.
• Strong understanding of information security principals, security framework and Risk management processes.
• Experience with governance, compliance, and protection tools (e.g., Proofpoint, Microsoft Purview, eDiscovery, DLP).
• Proficiency in PowerBI Pro, SharePoint, and Power Automate for governance reporting and collaboration.
• Excellent organizational, planning and time management skills
• Ability to communicate effectively and present complex security topics to stakeholders and leadership.

#LI-HP2

GM does not provide immigration-related sponsorship for this role. Do not apply for this role if you will need GM immigration sponsorship now or in the future. This includes direct company sponsorship, entry of GM as the immigration employer of record on a government form, and any work authorization requiring a written submission or other immigration support from the company (e.g., H1-B, OPT, STEM OPT, CPT, TN, J-1, etc). This role is categorized as hybrid. This means the selected candidate is expected to report to a specific location at least 3 times a week {or other frequency dictated by their manager}. This job is not eligible for relocation benefits. Any relocation costs would be the responsibility of the selected candidate.

About GM

Our vision is a world with Zero Crashes, Zero Emissions and Zero Congestion and we embrace the responsibility to lead the change that will make our world better, safer and more equitable for all.

Why Join Us 

We believe we all must make a choice every day – individually and collectively – to drive meaningful change through our words, our deeds and our culture. Every day, we want every employee to feel they belong to one General Motors team.