Product Cybersecurity GRC Manager

General Motors Ventures; Warren (MI); Hybrid; USD 160,000 - 210,000; Full time

Job summary

General Motors is seeking a Manager, Cybersecurity Engineer to lead GM’s product cybersecurity GRC across vehicle programs and markets. You will own the controls framework, drive TARA activities, and align policies with evolving regulatory mandates while coordinating audits with government agencies globally.

You will mentor a high-performing team, partner with Vehicle Cybersecurity Engineering and Legal, and translate complex requirements into actionable guidance for engineering and program

Qualifications

• Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Engineering, or a related field
• Minimum 10 years of experience in cybersecurity, with a focus on GRC, regulatory compliance, or product/automotive cybersecurity
• Demonstrated experience leading teams, including people management, performance management, and talent development
• Deep knowledge of UNR155, UNECE WP.29, NIST CSF and global automotive cybersecurity regulatory frameworks
• Experience orchestrating Vehicle Type Approval processes and/or CSMS audits with government or regulatory bodies
• Hands-on experience with Threat Analysis and Risk Assessment (TARA) methodologies and integration into the vehicle development lifecycle
• Strong expertise in cybersecurity controls frameworks (e.g., ISO/SAE 21434, ISO 27001, NIST CSF, NIST SP 800-53)
• Experience developing or maintaining cybersecurity policies and standards aligned to regulatory and industry requirements
• Proven ability to identify control gaps, develop remediation strategies, and drive closure across cross-functional engineering teams
• Experience managing complex, multi-stakeholder programs across global, geographically distributed organizations
• Strong analytical, problem-solving, and critical thinking skills, with ability to assess systemic issues and translate findings into executive-ready reports
• Excellent communication, presentation, and interpersonal skills — able to engage effectively with technical teams, senior leadership, and government representatives
• Ability to manage multiple high-complexity programs concurrently and prioritize effectively under shifting regulatory demands
• Strong work ethic, attention to detail, and commitment to excellence

Responsibilities

• Own GM's product cybersecurity controls framework, ensuring coverage across vehicle programs, markets, and regulatory requirements
• Lead Threat Analysis and Risk Assessment (TARA) activities for vehicle product systems
• Provide requirements for and input to product cybersecurity policies and standards; drive approvals and cross-functional integration
• Monitor global automotive cybersecurity regulations and translate changes into actionable obligations
• Track emerging vehicle theft-related cybersecurity requirements and drive programmatic responses
• Own UNR155 compliance program and lead Vehicle Type Approval (VTA) and CSMS audits with government agencies
• Manage audit readiness, evidence preparation, submission coordination, and post-audit remediation
• Build relationships with government authorities and technical service organizations across markets
• Ensure audit artifacts and CSMS evidence packages are current and audit-ready
• Lead, develop, and mentor a team of cybersecurity GRC professionals
• Establish KPIs and own delivery of team results
• Manage workforce planning and performance management for all direct reports
• Build a team with optimal expertise and experience, supporting hiring and onboarding
• Champion GM's behaviors and values, fostering an inclusive team environment

Skills

Cybersecurity leadership

GRC

Regulatory compliance

Threat Analysis (TARA)

CSMS audits

ISO/SAE 21434

UNECE WP.29

UNR155

Education

Bachelor’s or Master’s degree in Cybersecurity/CS/Engineering

Tools

Archer

ServiceNow

IBM OpenPages

Job description

General Motors is seeking a Manager, Cybersecurity Engineer to lead GM’s product cybersecurity GRC across vehicle programs and markets. You will own the controls framework, drive TARA activities, and align policies with evolving regulatory mandates while coordinating audits with government agencies globally.

You will mentor a high-performing team, partner with Vehicle Cybersecurity Engineering and Legal, and translate complex requirements into actionable guidance for engineering and program