Manager - Product Cyber Security Compliance

Job Description

General Motors is undergoing a major transformation, both in how we operate and in how we will influence the future of transportation. Our Software Services team is on the forefront of this work, emboldening our culture by seeking out determined, innovative individuals who will join our team to help move us forward and achieve our mission.

About the Role 

The Manager, Cybersecurity Engineer is a senior people leadership role within GM Cybersecurity, and part of the Cybersecurity Governance, Risk & Compliance team. This role owns GM's vehicle product cybersecurity compliance posture — including conducting threat analysis and risk assessment, providing requirements to GM’s Cybersecurity policy and underlying standards, ensuring global regulatory compliance, and orchestrating government-facing audits — while driving control gap remediation across vehicle engineering and product teams. 

As the regulatory landscape continues to evolve, this role is also responsible for incorporating emerging vehicle theft-related and compliance requirements into GM's product cybersecurity controls framework. The ideal candidate is a seasoned cybersecurity GRC professional with deep automotive regulatory expertise, a collaborative leadership style, and a proven track record managing high-performing teams while influencing cross-functional stakeholders. 

Key Responsibilities 

Product Cybersecurity Compliance 

• Own and maintain GM's product cybersecurity controls framework, ensuring coverage across all applicable vehicle programs, markets, and regulatory requirements. 

• Lead and oversee Threat Analysis and Risk Assessment (TARA) activities for vehicle product systems, ensuring threat models are current, comprehensive, and integrated into the vehicle development lifecycle. 

• Provide requirements for and input to product cybersecurity policies and standards aligned to evolving threats, regulatory mandates, and industry best practices; drive necessary approvals and ensure cross-functional integration. 

• Monitor and interpret global automotive cybersecurity regulations and standards (e.g., ISO/SAE 21434, ISO 24089, UNECE WP.29 frameworks), translating changes into actionable compliance obligations for internal teams. 

• Track emerging vehicle theft-related cybersecurity compliance requirements and drive necessary programmatic responses across applicable vehicle programs and markets. 

• UNR155 & Vehicle Type Approval: Own GM's compliance program for United Nations Regulation No. 155 (UNR155) — the global standard for automotive cybersecurity — and serve as the lead orchestrator for Vehicle Type Approval (VTA) and Cybersecurity Management System (CSMS) audits with government agencies and technical services globally. 

• Manage all aspects of audit readiness, evidence preparation, submission coordination, and post-audit remediation across multiple regulatory jurisdictions. 

• Build and maintain productive relationships with government authorities, type approval bodies, and technical service organizations (e.g., IDIADA, etc.) across international markets.