Senior Manager, Product Cybersecurity & Compliance

generalmotors; Warren (MI); Hybrid; USD 140,000 - 210,000; Full time

Benefits offered by this job

Hybrid work model

Relocation benefits

Job summary

General Motors seeks a senior Manager, Cybersecurity Engineer to lead GM’s product cybersecurity governance, risk, and compliance. You will own the product cybersecurity controls framework, drive TARA activities, and ensure regulatory compliance across markets and vehicle programs.

The role requires extensive GRC experience, deep automotive regulation knowledge (UNR155, WP.29), and proven leadership across global teams. Hybrid work and relocation benefits may apply.

Qualifications

• Bachelor's or Master's degree in Cybersecurity, Computer Science, Engineering, or related field.
• 10+ years of cybersecurity experience with a focus on GRC, regulatory compliance, or product/ automotive cybersecurity.
• Proven experience leading teams, including people management and talent development.
• Deep knowledge of UNR155, UNECE WP.29, NIST CSF and global automotive regulatory frameworks.
• Experience in vehicle type approvals and CSMS audits with government or regulatory bodies.
• Hands-on experience with threat analysis and risk assessment methodologies (TARA).
• Strong expertise in cybersecurity controls frameworks (ISO/SAE 21434, ISO 27001, NIST CSF, NIST SP 800-53).
• Experience developing or maintaining cybersecurity policies and standards.

Responsibilities

• Own GM's product cybersecurity controls framework across vehicle programs and markets.
• Lead Threat Analysis and Risk Assessment (TARA) activities for vehicle product systems.
• Provide requirements for cybersecurity policies and standards and drive cross-functional integration.
• Monitor global automotive cybersecurity regulations and translate changes into actionable obligations.
• Own UNR155 compliance program and lead Vehicle Type Approval (VTA) and CSMS audits.
• Manage audit readiness, evidence preparation, submission coordination, and remediation.
• Build relationships with government authorities, type approval bodies, and service providers.
• Ensure audit artifacts and CSMS evidence are current and audit-ready.

Skills

GRC leadership

Regulatory compliance

Cross-functional leadership

TARA

Vehicle cybersecurity

Audits

Education

Bachelor's or Master's in Cybersecurity/CS/Engineering

Tools

Archer

ServiceNow

IBM OpenPages

Job description

General Motors seeks a senior Manager, Cybersecurity Engineer to lead GM’s product cybersecurity governance, risk, and compliance. You will own the product cybersecurity controls framework, drive TARA activities, and ensure regulatory compliance across markets and vehicle programs.

The role requires extensive GRC experience, deep automotive regulation knowledge (UNR155, WP.29), and proven leadership across global teams. Hybrid work and relocation benefits may apply.