General Motors

Manager - Product Cyber Security Compliance

General Motors$120K — $145K *
Manufacturing & Automotive
8 - 10 years of experience
Job Overview by Ladders

Qualifications

  • Bachelor's or Master's degree in Cybersecurity, Computer Science, Engineering, or a related field
  • Minimum 10 years of experience in cybersecurity, with a focus on GRC and regulatory compliance
  • Proven experience leading teams, including performance management
  • Deep knowledge of UNR155, UNECE WP.29, and NIST CSF
  • Hands-on experience with Threat Analysis and Risk Assessment methodologies
  • Strong expertise in cybersecurity controls frameworks such as ISO/SAE 21434
  • Excellent communication and interpersonal skills to engage effectively with stakeholders

Responsibilities

  • Own and maintain GM's product cybersecurity controls framework across all vehicle programs
  • Lead Threat Analysis and Risk Assessment activities for vehicle product systems
  • Provide requirements for cybersecurity policies and standards aligned to industry best practices
  • Monitor global automotive cybersecurity regulations, translating changes into compliance obligations
  • Own GM's compliance program for UNR155, leading audits with government agencies
  • Identify cybersecurity control gaps and drive remediation efforts with engineering teams
  • Lead and develop a high-performing team of cybersecurity professionals

Benefits

  • Hybrid work environment with flexibility
  • Potential eligibility for relocation benefits
  • Opportunities for professional development and team growth
  • Culture fostering accountability, collaboration, and inclusivity
  • Engagement in high-impact projects affecting automotive cybersecurity standards
Full Job Description
Job Description

The Manager, Cybersecurity Engineer is a senior people leadership role within GM Cybersecurity, and part of the Cybersecurity Governance, Risk & Compliance team. This role owns GM's vehicle product cybersecurity compliance posture - including conducting threat analysis and risk assessment, providing requirements to GM's Cybersecurity policy and underlying standards, ensuring global regulatory compliance, and orchestrating government-facing audits - while driving control gap remediation across vehicle engineering and product teams.

As the regulatory landscape continues to evolve, this role is also responsible for incorporating emerging vehicle theft-related and compliance requirements into GM's product cybersecurity controls framework. The ideal candidate is a seasoned cybersecurity GRC professional with deep automotive regulatory expertise, a collaborative leadership style, and a proven track record managing high-performing teams while influencing cross-functional stakeholders.

Key Responsibilities

Product Cybersecurity Compliance

  • Own and maintain GM's product cybersecurity controls framework, ensuring coverage across all applicable vehicle programs, markets, and regulatory requirements.


  • Lead and oversee Threat Analysis and Risk Assessment (TARA) activities for vehicle product systems, ensuring threat models are current, comprehensive, and integrated into the vehicle development lifecycle.


  • Provide requirements for and input to product cybersecurity policies and standards aligned to evolving threats, regulatory mandates, and industry best practices; drive necessary approvals and ensure cross-functional integration.


  • Monitor and interpret global automotive cybersecurity regulations and standards (e.g., ISO/SAE 21434, ISO 24089, UNECE WP.29 frameworks), translating changes into actionable compliance obligations for internal teams.


  • Track emerging vehicle theft-related cybersecurity compliance requirements and drive necessary programmatic responses across applicable vehicle programs and markets.


  • UNR155 & Vehicle Type Approval: Own GM's compliance program for United Nations Regulation No. 155 (UNR155) - the global standard for automotive cybersecurity - and serve as the lead orchestrator for Vehicle Type Approval (VTA) and Cybersecurity Management System (CSMS) audits with government agencies and technical services globally.


  • Manage all aspects of audit readiness, evidence preparation, submission coordination, and post-audit remediation across multiple regulatory jurisdictions.


  • Build and maintain productive relationships with government authorities, type approval bodies, and technical service organizations (e.g., IDIADA, etc.) across international markets.


  • Ensure audit artifacts, compliance documentation, and CSMS evidence packages are current, complete, and audit-ready at all times.


Control Gap Identification & Remediation

  • Lead the identification, assessment, and prioritization of cybersecurity control gaps across vehicle product systems, aligned to UNR155, ISO/SAE 21434, and other applicable frameworks.


  • Drive cross-functional remediation efforts, partnering with Vehicle Cybersecurity Engineering and other engineering teams to develop and execute corrective action plans.


  • Establish and maintain tracking mechanisms for control gap closure, reporting status to senior leadership on a regular cadence.


  • Conduct or oversee root cause analyses of identified control deficiencies and systemic risk trends, ensuring durable remediation strategies are implemented.


Cross-Functional Partnership

  • Partner closely with the Vehicle Cybersecurity Engineering team and other engineering organizations to align compliance requirements to design and development processes throughout the vehicle lifecycle.


  • Collaborate with Legal, Government Affairs, Program Management, and Supplier teams to ensure a coordinated approach to regulatory compliance.


  • Provide cybersecurity GRC expertise and compliance guidance to internal stakeholders, translating complex regulatory requirements into clear, actionable direction for engineering and program teams.


  • Represent GM's product cybersecurity GRC program in external-facing engagements, including regulatory submissions, audits, and industry working groups.


People Leadership & Team Management

  • Lead, develop, and mentor a team of cybersecurity GRC professionals, fostering a high-performance culture grounded in accountability, collaboration, and continuous growth.


  • Set clear objectives, establish Key Performance Indicators (KPIs), and own delivery of team results aligned to organizational and GM strategic priorities.


  • Manage workforce planning, talent development, and performance management for all direct reports.


  • Build a team with the optimal mix of expertise and experience, supporting hiring and onboarding activities as needed.


  • Champion GM's behaviors and values, fostering an inclusive and psychologically safe team environment.


Your Skills & Abilities (Required Qualifications)

  • Bachelor's or Master's degree in Cybersecurity, Computer Science, Engineering, or a related field


  • Minimum 10 years of experience in cybersecurity, with a focus on GRC, regulatory compliance, or product/automotive cybersecurity


  • Demonstrated experience leading teams, including people management, performance management, and talent development


  • Deep knowledge of UNR155, UNECE WP.29, NIST CSF and global automotive cybersecurity regulatory frameworks


  • Experience orchestrating or directly participating in Vehicle Type Approval processes and/or CSMS audits with government or regulatory bodies


  • Hands-on experience with Threat Analysis and Risk Assessment (TARA) methodologies and integration into the vehicle development lifecycle


  • Strong expertise in cybersecurity controls frameworks (e.g., ISO/SAE 21434, ISO 27001, NIST CSF, NIST SP 800-53)


  • Experience developing or maintaining cybersecurity policies and standards aligned to regulatory and industry requirements


  • Proven ability to identify control gaps, develop remediation strategies, and drive closure across cross-functional engineering teams


  • Experience managing complex, multi-stakeholder programs across global, geographically distributed organizations


  • Strong analytical, problem-solving, and critical thinking skills, with ability to assess systemic issues and translate findings into executive-ready reports


  • Excellent communication, presentation, and interpersonal skills - able to engage effectively with technical teams, senior leadership, and government representatives


  • Ability to manage multiple high-complexity programs concurrently and prioritize effectively under shifting regulatory demands


  • Strong work ethic, attention to detail, and commitment to excellence


What Will Give You A Competitive Edge (Preferred Qualifications)

(Not mandatory, but would give candidates a competitive edge)

  • Relevant professional certifications (e.g., CGRC, CRISC, CISA, CISSP, ISO/SAE 21434 Lead Auditor, PMP)


  • Familiarity with vehicle theft-related cybersecurity regulations and compliance obligations (e.g., NHTSA guidance, regional anti-theft mandates)


  • Experience with GRC software tools and platforms (e.g., Archer, ServiceNow, IBM OpenPages)


  • Working knowledge of automotive embedded systems, vehicle Electronic Control Unit (ECU) architecture, or connected vehicle technologies


  • Experience engaging with technical service organizations (e.g., IDIADA, etc.) in the context of type approval


  • Familiarity with automotive supply chain cybersecurity requirements and partner/supplier compliance programs


  • Data analytics, dashboard development, or GRC platform reporting experience


  • Prior experience in a global automotive Original Equipment Manufacturer (OEM), Tier 1 supplier, or government agency environment


  • Experience with enterprise risk frameworks (e.g., COSO, FAIR, ERM) in a product cybersecurity context


GM does not provide immigration-related sponsorship for this role. Do not apply for this role if you will need GM immigration sponsorship now or in the future. This includes direct company sponsorship, entry of GM as the immigration employer of record on a government form, and any work authorization requiring a written submission or other immigration support from the company (e.g., H1-B, OPT, STEM OPT, CPT, TN, J-1, etc).This role is categorized as hybrid. This means the selected candidate is expected to report to a specific location at least 3 times a week {or other frequency dictated by their manager}.This job may be eligible for relocation benefits.

About General Motors

General Motors Company engages in the manufacture and sale of cars and trucks in the United States, China, Brazil, Germany, the United Kingdom, Canada, and Italy. It offers sedans, crossovers, sport utility vehicles, pick-up trucks, coupes, sports/convertibles and hybrid vehicles, hatchbacks/wagons, and vans, as well as mini cars in India. The company also provides parts and accessories, such as iPod and MP3 compatibility, mobility accessories, performance parts, AC parts and services, and merchandise. In addition, it offers vehicle safety, security, and information services. The company provides used vehicles. It offers its products through dealers and distributors. General Motors Company was formerly known as NGMCO, Inc. and changed its name to General Motors Company in July 2009. The company was incorporated in 2009 and is based in Detroit, Michigan. It operates manufacturing facilities in India, the United States, and Canada. General Motors Company operates as a subsidiary of the United States Department of The Treasury. General Motors led global vehicle sales for 77 consecutive years from 1931 through 2007, longer than any other automaker, and is currently among the world's largest automakers by vehicle unit sales. General Motors acts in most countries outside the USA via wholly-owned subsidiaries but operates in China through 10 joint ventures. GM's OnStar subsidiary provides vehicle safety, security, and information services. In 2009, General Motors shed several brands, closing Saturn, Pontiac, and Hummer, and emerged from a government-backed Chapter 11 reorganization. In 2010, GM made an initial public offering IPOs to date and returned to profitability later that year.

General Motors Careers

Join the dynamic team at General Motors, a global leader in automotive innovation and technology. At General Motors, we offer unparalleled job opportunities that propel your career forward while contributing to a legacy of engineering excellence.

Work You’ll Do

Embark on a career with General Motors to drive the future of mobility. Our team is dedicated to redefining the automotive landscape through innovation and leadership in electric vehicles and sustainable solutions. By joining us, you will be part of a culture that values diversity, teamwork, and continuous professional growth.

Transform Your Career

General Motors is not just a company; it's a community where you can grow your skills alongside the best in the industry. Our leadership is committed to providing every employee—from interns to senior professionals—with opportunities for career advancement, leadership development, and diversity training.

Innovate and Lead

At General Motors, innovation is at the core of everything we do. From research and development to manufacturing, our teams work collaboratively to lead the industry with cutting-edge technologies and sustainable practices. We encourage our employees to think big and push the boundaries of what’s possible.

Join Our Global Team

As part of our global workforce, you will collaborate with talented individuals who are passionate about shaping the future of transportation. General Motors offers a variety of career paths in engineering, design, IT, marketing, and more. With over 155,000 employees worldwide, our network provides expansive opportunities for networking and professional development.

Internship Programs and Employment Benefits

Start your career journey with a General Motors internship, where you can apply your academic knowledge to real-world projects. Our internships provide a robust foundation in the automotive industry, with mentorship from experienced leaders. Full-time employees enjoy a wealth of benefits, including comprehensive health care, retirement plans, and performance bonuses, ensuring that your hard work is rewarded.

Explore Job Opportunities

Whether you’re a seasoned professional or a recent graduate, General Motors offers positions that leverage your unique skills. Our hiring process is designed to identify and nurture talent, focusing on aligning your capabilities with the right opportunities for growth within the company.

Stay Connected

Join Our Team Search open positions that match your skills and interests. At General Motors, we look for innovative, driven, and solution-oriented team players. Explore the possibilities that await you in a career at General Motors.

Keep Up to Date

Stay ahead with career tips, insider perspectives, and industry-leading insights you can put to use today—all from the people who drive success at General Motors.

Job Alert Emails

Customize your subscription to receive job alerts, latest news, and insider tips tailored to your preferences. Discover the exciting and rewarding career opportunities available at General Motors. Embark on a journey of growth, innovation, and leadership at General Motors. Shape your future in an environment that fosters diversity, learning, and the pursuit of excellence. Join us and redefine the roads of tomorrow.
Learn more about General Motors
Size
157,000 employees
Market Cap
$46.9 billion
Industry
Net Income
$6.4 billion
Founded
1908
5 Year Trend
-3.2%
Revenue
$122.4 billion
NASDAQ

Similar Jobs

More Jobs at General Motors

More Manufacturing & Automotive Jobs

  • Director of Sales
    Confidential Company
    Waterloo, IA 50701 (Black Hawk County)
  • Vice President of Sales
    Confidential Company
    Conway, SC 29526 (Horry County)
  • Director of Engineering
    $150K — $250K + profit-sharing, excellent benefits, vacation, and much more *
    Buyers Products
    Mentor, OH 44060 (Lake County)
  • Manufacturing Engineer
    $80K — $130K *
    Stellant Systems
    Torrance, CA 90503 (Los Angeles County)
  • Quality Manager
    $88K — $105K *
    James Moore & Co. P.L.
    Mount Olive, NC 28365 (Wayne County)

Find similar Manager - Product Cyber Security Compliance jobs: