Manager, Software Supply Chain Security

General Motors LLC; United States; On-site; USD 180,000 - 260,000; Full time

Job summary

General Motors seeks a leader to head Software Supply Chain Security, driving strategy, roadmap, and day-to-day operations across GM's secure software initiatives. You will build and mentor a high-performing team and own security outcomes including dependency risk, SBOM coverage, and container security.

You will collaborate with engineering, platform, cloud, and procurement to embed secure-by-design controls throughout the software lifecycle, establishing guardrails and measurable security

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field.
• 8+ years of experience in cybersecurity, application security, platform security, software engineering, or a closely related technical field.
• 3+ years of people leadership experience, including hiring, coaching, performance management, and organizational planning.
• 3+ years of experience leading or owning programs in software supply chain security, secure software delivery, build pipeline security, container security, or third-party software risk.
• Demonstrated experience working across 2 or more technical domains such as source control, build systems, artifact repositories, cloud platforms, containers, developer tooling, or software governance.
• Experience defining, tracking, and improving operational metrics and KPIs for a technical or security function.
• Proven ability to influence cross-functional stakeholders and drive decisions on significant technical and operational matters.

Responsibilities

• Lead the strategy, roadmap, and day-to-day operation of GM's Software Supply Chain Security function.
• Build, develop, and lead a high-performing team, including hiring, coaching, performance management, and workforce planning.
• Own security outcomes and key performance indicators for code dependency risk, SBOM coverage, third-party software security, pipeline controls, and container security.
• Drive cross-functional decisions with engineering, platform, cloud, infrastructure, procurement, and risk teams to embed secure-by-design controls into delivery workflows.
• Establish and improve policies, standards, and reusable guardrails for open-source software use, software provenance, build integrity, artifact security, and developer tooling.
• Prioritize investments, allocate resources, and lead change initiatives that improve security effectiveness, operational consistency, and developer experience.

Skills

Cybersecurity experience

People leadership

Program management

Cross-domain collaboration

Metrics & KPIs

Stakeholder influence

Education

Bachelor’s degree in Computer Science or related field

Job description

Job Description General Motors is building secure software into every vehicle, product, and digital experience we deliver. We are seeking a people leader to lead our Software Supply Chain Security function and help reduce risk before software reaches production. This team is responsible for secure-by-design controls across code, dependencies, developer tooling, build and release pipelines, containers, and third-party software. The work includes governance, open-source software security, software bill of materials, continuous integration and delivery controls, integrated development environment controls, and container security. This role is ideal for a leader who can turn strategy into execution, build strong teams, and partner across engineering to make secure delivery easier at scale. The Role As Manager, Software Supply Chain Security, you will lead a distinct cybersecurity function responsible for reducing software supply chain risk across GM. You will translate strategy into team direction, operating priorities, and measurable outcomes while making resource, workforce, and operational decisions that scale impact. You will work closely with software engineering, developer platform, cloud, infrastructure, procurement, and risk partners to embed practical security controls into the software lifecycle. You will own key performance indicators, drive continuous improvement, and help shape a developer-friendly security model that protects the business without slowing delivery. This is a high-impact leadership role for someone who can build talent, influence across organizations, and lead change in a complex technical environment.

What You’ll Do

Lead the strategy, roadmap, and day-to-day operation of GM's Software Supply Chain Security function. Build, develop, and lead a high-performing team, including hiring, coaching, performance management, and workforce planning. Own security outcomes and key performance indicators for code dependency risk, software bill of materials coverage, third-party software security, pipeline controls, and container security. Drive cross-functional decisions with engineering, platform, cloud, infrastructure, procurement, and risk teams to embed secure-by-design controls into delivery workflows. Establish and improve policies, standards, and reusable guardrails for open-source software use, software provenance, build integrity, artifact security, and developer tooling. Prioritize investments, allocate resources, and lead change initiatives that improve security effectiveness, operational consistency, and developer experience.

Your Skills & Abilities (Required Qualifications)

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field.
• 8+ years of experience in cybersecurity, application security, platform security, software engineering, or a closely related technical field.
• 3+ years of people leadership experience, including hiring, coaching, performance management, and organizational planning.
• 3+ years of experience leading or owning programs in software supply chain security, secure software delivery, build pipeline security, container security, or third-party software risk.
• Demonstrated experience working across 2 or more technical domains such as source control, build systems, artifact repositories, cloud platforms, containers, developer tooling, or software governance.
• Experience defining, tracking, and improving operational metrics and key performance indicators for a technical or security function.
• Proven ability to influence cross-functional stakeholders and drive decisions on significant technical and operational matters.

What Will Give You A Competitive Edge (Preferred Qualifications)

• Advanced degree in Cybersecurity, Computer Science, Engineering, Business, or a related field.
• Experience leading software supply chain security in a large, complex enterprise environment.
• Experience with software bill of materials programs, open-source software governance, software composition analysis, artifact signing, or build provenance.
• Experience with developer platforms, continuous integration and delivery pipelines, container platforms, cloud-native environments, or integrated development environment governance.
• Experience leading transformation initiatives that balance security, reliability, usability, and speed for engineering teams.

About GM

Our vision is a world with Zero Crashes, Zero Emissions and Zero Congestion and we embrace the responsibility to lead the change that will make our world better, safer and more equitable for all.

Why Join Us

We believe we all must make a choice every day – individually and collectively – to drive meaningful change through our words, our deeds and our culture. Every day, we want every employee to feel they belong to one General Motors team.

Benefits Overview

From day one, we're looking out for your well-being–at work and at home–so you can focus on realizing your ambitions. Learn how GM supports a rewarding career that rewards you personally by visiting Total Rewards resources.

Non-Discrimination and Equal Employment Opportunities (U.S.)

General Motors is committed to being a workplace that is not only free of unlawful discrimination, but one that genuinely fosters inclusion and belonging. We strongly believe that providing an inclusive workplace creates an environment in which our employees can thrive and develop better products for our customers. All employment decisions are made on a non-discriminatory basis without regard to sex, race, color, national origin, citizenship status, religion, age, disability, pregnancy or maternity status, sexual orientation, gender identity, status as a veteran or protected veteran, or any other similarly protected status in accordance with federal, state and local laws.

Accommodations

General Motors offers opportunities to all job seekers including individuals with disabilities. If you need a reasonable accommodation to assist with your job search or application for employment, email us or call us at 1-800-865-7580. In your email, please include a description of the specific accommodation you are requesting as well as the job title and requisition number of the position for which you are applying.