Manager - Product Cyber Security Compliance

About this role

Job Description General Motors is undergoing a major transformation, both in how we operate and in how we will influence the future of transportation. Our Software Services team is on the forefront of this work, emboldening our culture by seeking out determined, innovative individuals who will join our team to help move us forward and achieve our mission.

About the Role  

The Manager,   Cybersecurity Engineer   is a senior people leadership role within GM Cybersecurity,   and part of   the Cybersecurity G overnance, Risk & Compliance   team. This role owns GM's vehicle product cybersecurity compliance posture — including   conducting   threat analysis and risk assessment,   providing requirements to GM’s Cybersecurity   policy   and   underlying   standards,   ensuring   global regulatory compliance, and   orchestrating   government-facing audit s   — while driving control gap remediation across vehicle engineering and product teams.  

As the regulatory landscape continues to evolve, this role is also responsible for incorporating emerging vehicle theft-related   and   compliance requirements into GM's product cybersecurity controls framework. The ideal candidate is a seasoned cybersecurity GRC professional with deep automotive regulatory   expertise , a collaborative leadership style, and a proven   track record   managing high-performing teams while influencing cross-functional stakeholders.  

Key Responsibilities  

Product Cybersecurity Compliance  

• Own and   maintain   GM's product cybersecurity   controls framework , ensuring coverage across all applicable vehicle programs, markets, and regulatory requirements.  

• Lead and oversee   Threat Analysis and Risk Assessment (TARA)   activities for vehicle product systems, ensuring threat models are current, comprehensive, and integrated into the vehicle development lifecycle.  

• Provide requirements for and input to   product   cybersecurity policies and standards   aligned to evolving threats, regulatory mandates, and industry best practices; drive necessary approvals and ensure cross-functional integration.  

• Monitor and interpret global automotive cybersecurity regulations and standards (e.g., ISO/SAE 21434, ISO 24089, UNECE WP.29 frameworks), translating changes into actionable compliance obligations for internal teams.  

• Track emerging vehicle theft-related cybersecurity compliance requirements and drive necessary programmatic responses across applicable vehicle programs and markets.  

• UNR155 & Vehicle Type Approval:   Own GM's compliance program for   United Nations Regulation No. 155 (UNR155)   — the global standard for automotive cybersecurity — and serve as the lead orchestrator for   Vehicle Type Approval (VTA)   and   Cybersecurity Management System (CSMS) audits   with government agencies and technical services globally.  

• Manage all aspects of audit readiness, evidence preparation, submission coordination, and post-audit remediation across multiple regulatory   jurisdictions .  

• Build and   maintain   productive relationships with government authorities,   type   approval bodies, and technical service organizations (e.g., IDIADA , etc. ) across international markets.  

• Ensure audit artifacts, compliance documentation, and CSMS evidence packages are current, complete, and audit-ready   at all times .  

Control Gap Identification & Remediation  

• Lead the identification, assessment, and prioritization of cybersecurity control gaps across vehicle product systems, aligned to UNR155, ISO/SAE 21434, and other applicable frameworks.  

• Drive cross-functional remediation efforts, partnering with Vehicle Cybersecurity Engineering and other engineering teams to develop and execute corrective action plans.  

• Establish and   maintain   tracking mechanisms for   control   gap closure, reporting status to senior leadership on a regular   cadence .  

• Conduct or oversee root cause analyses of identified control deficiencies and systemic risk trends, ensuring durable remediation strategies are implemented.  

Cross-Functional Partnership  

• Partner closely with the   Vehicle Cybersecurity Engineering   team and other engineering organizations to align compliance requirements to design and development processes throughout the vehicle lifecycle.  

• Collaborate with Legal, Government Affairs, Program Management, and Supplier teams to ensure a coordinated approach to regulatory compliance.  

• Provide cybersecurity GRC   expertise   and compliance guidance to internal stakeholders, translating complex regulatory requirements into clear, actionable direction for engineering and   program   teams.  

• Represent GM's product cybersecurity GRC program in external-facing engagements, including regulatory submissions, audits, and industry working groups.  

People Leadership & Team Management  

• Lead, develop, and mentor a team of cybersecurity GRC professionals, fostering a high-performance culture grounded in accountability, collaboration, and continuous growth.  

• Set clear   objectives ,   establish   Key Performance Indicators (KPIs), and own delivery of team results aligned to organizational and GM strategic priorities.  

• Manage workforce planning, talent development, and performance management for all direct reports.  

• Build a team with the   optimal   mix of   expertise   and experience, supporting hiring and onboarding activities as needed.  

• Champion GM's behaviors and values, fostering an inclusive and psychologically safe team environment.  

Your Skills & Abilities (Required Qualifications)  

• Bachelor's or   Master's   degree   in Cybersecurity, Computer Science, Engineering, or a related field  

• Minimum 10 years of experience   in cybersecurity, with a focus on GRC, regulatory compliance, or product/automotive cybersecurity  

• Demonstrated experience leading teams , including people management, performance management, and talent development  

• Deep knowledge of

Similar jobs

• Manager, Cyber Security — ICF · Reston, VA
• Manager, Cybersecurity — Litera · Colorado, United States
• Manager - Product Security — Microchip Technology · AZ - Chandler
• Manager - Product Compliance — Sharkninjaoperatingllc · Needham, MA, United States
• Manager - Cyber Operations — Iberdrola Group · Rochester, New York, United States
• Cybersecurity Product Manager — Creative Artists Agency (CAA) · Nashville, TN
• Cybersecurity & Compliance Lead — Bti Solutions · DIR / ARLINGTON, VA
• Manager, Product Security Engineering — Dragos · Remote