Product Cybersecurity Compliance Leader

General Motors; Warren (MI); Hybrid; USD 170,000 - 260,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

General Motors is seeking a senior Manager, Cybersecurity Engineer to lead the GRC program for vehicle cybersecurity. You will own the product cybersecurity controls framework, oversee threat analysis and risk assessments, and drive audits with government authorities to ensure global regulatory compliance.

You will manage cross‑functional teams and partner with engineering, Legal, and Government Affairs to embed regulatory requirements into the development lifecycle.

Qualifications

• Bachelor's or Master's degree in Cybersecurity, Computer Science, Engineering, or a related field
• Minimum 10 years of experience in cybersecurity, with a focus on GRC, regulatory compliance, or product/automotive cybersecurity
• Demonstrated experience leading teams, including people management, performance management, and talent development
• Deep knowledge of UNR155, UNECE WP.29, NIST CSF and global automotive cybersecurity regulatory frameworks
• Experience orchestrating or directly participating in Vehicle Type Approval processes and/or CSMS audits with government or regulatory bodies
• Hands‑on experience with Threat Analysis and Risk Assessment (TARA) methodologies and integration into the vehicle development lifecycle
• Strong expertise in cybersecurity controls frameworks (e.g., ISO/SAE 21434, ISO 27001, NIST CSF, NIST SP 800‑53)
• Experience developing or maintaining cybersecurity policies and standards aligned to regulatory and industry requirements
• Proven ability to identify control gaps, develop remediation strategies, and drive closure across cross‑functional engineering teams
• Experience managing complex, multi‑stakeholder programs across global, geographically distributed organizations
• Strong analytical, problem‑solving, and critical thinking skills, with ability to assess systemic issues and translate findings into executive‑ready reports
• Excellent communication, presentation, and interpersonal skills — able to engage effectively with technical teams, senior leadership, and government representatives
• Ability to manage multiple high‑complexity programs concurrently and prioritize effectively under shifting regulatory demands
• Strong work ethic, attention to detail, and commitment to excellence

Responsibilities

• Own and maintain GM's product cybersecurity controls framework across vehicle programs, markets and regulatory requirements
• Lead Threat Analysis and Risk Assessment activities for vehicle product systems
• Provide requirements for and input to cybersecurity policies and standards aligned to evolving threats and mandates
• Track global automotive cybersecurity regulations and translate changes into actionable obligations
• Own GM's UNR155 compliance program and lead Vehicle Type Approval audits with government bodies
• Identify and remediate cybersecurity control gaps across vehicle product systems
• Partner with engineering teams to develop and execute remediation plans
• Lead cross-functional alignment of compliance requirements throughout the vehicle lifecycle
• Represent GM's product cybersecurity GRC program in external engagements like regulatory submissions and audits
• Lead, develop, and mentor a team of cybersecurity GRC professionals
• Set objectives, KPIs, and manage workforce planning and performance
• Foster an inclusive and high-performing team environment
• Provide cyber GRC expertise to internal stakeholders and translate requirements for engineering teams
• Support relocation and hybrid work arrangements as needed
• Advise on enterprise risk and regulatory reporting to senior leadership
• Support collaboration with Legal, Government Affairs and Supplier teams

Skills

Leadership

GRC

Policy & standards

Regulatory frameworks

Audits

Stakeholder management

Education

Bachelor's or Master's in Cybersecurity/CS/Engineering

Tools

Archer

ServiceNow

IBM OpenPages

Job description

General Motors is seeking a senior Manager, Cybersecurity Engineer to lead the GRC program for vehicle cybersecurity. You will own the product cybersecurity controls framework, oversee threat analysis and risk assessments, and drive audits with government authorities to ensure global regulatory compliance.

You will manage cross‑functional teams and partner with engineering, Legal, and Government Affairs to embed regulatory requirements into the development lifecycle.