Head of Software Supply Chain Security

General Motors LLC; United States; On-site; USD 180,000 - 260,000; Full time

Job summary

General Motors seeks a leader to head Software Supply Chain Security, driving strategy, roadmap, and day-to-day operations across GM's secure software initiatives. You will build and mentor a high-performing team and own security outcomes including dependency risk, SBOM coverage, and container security.

You will collaborate with engineering, platform, cloud, and procurement to embed secure-by-design controls throughout the software lifecycle, establishing guardrails and measurable security

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field.
• 8+ years of experience in cybersecurity, application security, platform security, software engineering, or a closely related technical field.
• 3+ years of people leadership experience, including hiring, coaching, performance management, and organizational planning.
• 3+ years of experience leading or owning programs in software supply chain security, secure software delivery, build pipeline security, container security, or third-party software risk.
• Demonstrated experience working across 2 or more technical domains such as source control, build systems, artifact repositories, cloud platforms, containers, developer tooling, or software governance.
• Experience defining, tracking, and improving operational metrics and KPIs for a technical or security function.
• Proven ability to influence cross-functional stakeholders and drive decisions on significant technical and operational matters.

Responsibilities

• Lead the strategy, roadmap, and day-to-day operation of GM's Software Supply Chain Security function.
• Build, develop, and lead a high-performing team, including hiring, coaching, performance management, and workforce planning.
• Own security outcomes and key performance indicators for code dependency risk, SBOM coverage, third-party software security, pipeline controls, and container security.
• Drive cross-functional decisions with engineering, platform, cloud, infrastructure, procurement, and risk teams to embed secure-by-design controls into delivery workflows.
• Establish and improve policies, standards, and reusable guardrails for open-source software use, software provenance, build integrity, artifact security, and developer tooling.
• Prioritize investments, allocate resources, and lead change initiatives that improve security effectiveness, operational consistency, and developer experience.

Skills

Cybersecurity experience

People leadership

Program management

Cross-domain collaboration

Metrics & KPIs

Stakeholder influence

Education

Bachelor’s degree in Computer Science or related field

Job description

General Motors seeks a leader to head Software Supply Chain Security, driving strategy, roadmap, and day-to-day operations across GM's secure software initiatives. You will build and mentor a high-performing team and own security outcomes including dependency risk, SBOM coverage, and container security.

You will collaborate with engineering, platform, cloud, and procurement to embed secure-by-design controls throughout the software lifecycle, establishing guardrails and measurable security